@ekanos/cli 0.21.0 → 0.22.0

package/dist/teams-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"teams-api.js","sourceRoot":"","sources":["../src/teams-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,0BAA0B,EAE1B,sBAAsB,EAGtB,oBAAoB,EAEpB,6BAA6B,EAE7B,kBAAkB,EAElB,2BAA2B,EAE3B,sBAAsB,EAEtB,+BAA+B,EAE/B,gBAAgB,EAEhB,yBAAyB,EAEzB,sBAAsB,EAGtB,sBAAsB,EAEtB,0BAA0B,EAE1B,4BAA4B,EAE5B,yBAAyB,EAEzB,4BAA4B,EAE5B,oBAAoB,EAEpB,sBAAsB,EAEtB,eAAe,EAEf,2BAA2B,EAE3B,8BAA8B,EAE9B,cAAc,EAEd,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAgDlB,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,WAAmB,EACnB,MAAc;IAEd,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE;QAC7C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB;QAC1B,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,WAAmB,EACnB,MAAyD;IAEzD,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;QAC1D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,WAAmB,EACnB,MAAyD,EACzD,IAIC;IAED,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM;QACtC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAAyD,EACzD,SAAiB;IAEjB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE;QAC5E,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,IAAY,EACZ,WAAmB,EACnB,MAAyE;IAEzE,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE;QACzD,MAAM,EAAE,QAAQ;QAChB,mEAAmE;QACnE,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/D,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,WAAmB,EACnB,MAAc,EACd,IAAuB;IAEvB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,oBAAoB;QAC1B,MAAM;QACN,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,IAAY;IAEZ,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QAC7D,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,IAAI,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACnD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,IAAqC;IAErC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,IAAsE;IAEtE,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACxD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAuD,EACvD,IAAY;IAEZ,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC3D,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACvE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,IAAI,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAAuD;IAEvD,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC3D,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACvE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAc;IAEd,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,qBAAqB;QAC3B,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAA0D,EAC1D,QAAiB;IAEjB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,+BAA+B,EAAE;QAC9D,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACnC,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAC9G,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS;QACpE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,MAAgB;IAEhB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACxD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS;QACpE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,MAAM,EAAE;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAc;IAEd,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE;QACzD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;QAC9B,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,WAAmB,EACnB,MAA4C;IAE5C,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACrE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAAc,EACd,IAA2B;IAE3B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;QAC9B,MAAM;QACN,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAA4C,EAC5C,IAA2B;IAE3B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACrE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE;QACjD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;QACtE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,UAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;QAC1D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;QACtE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,UAAU,EAAE;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,WAAmB,EACnB,MAAuD;IAEvD,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACnD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW;QAChF,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAuD,EACvD,UAAyB;IAEzB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE;QAC5D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW;QAChF,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,UAAU,EAAE;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE;QAC9C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;QACnE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,OAA6D;IAE7D,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,OAAO;QAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,8BAA8B,EAAE;QAC7D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,MAAM,EAAE;QAC7E,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CAAC,MAAyC;IAChE,OAAO,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AACpH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAY,EACZ,WAAmB,EACnB,MAAoB,EACpB,IAKC;;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAC1G;QACE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,kBACL,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,UAAU,WAAW,EAAE,IACnC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC5C;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CACF,CAAC;IAEF,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,IAAI,wCAAwC,EAC1D,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,CAClB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,uBAAuB;YAC9B,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,IAAI,KAAK,uBAAuB;gBAChC,CAAC,CAAC,qHAAqH;gBACvH,CAAC,CAAC,IAAI,KAAK,6BAA6B;oBACtC,CAAC,CAAC,kMAAkM;oBACpM,CAAC,CAAC,IAAI,KAAK,mBAAmB;wBAC5B,CAAC,CAAC,iGAAiG;wBACnG,CAAC,CAAC,IAAI,KAAK,wBAAwB;4BACjC,CAAC,CAAC,iIAAiI;4BACnI,CAAC,CAAC,IAAI,KAAK,gCAAgC;gCACzC,CAAC,CAAC,sHAAsH;gCACxH,CAAC,CAAC,8DAA8D,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,CACjB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,YAAY,QACvB,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mCACxC,CAAC,IAAI,KAAK,gBAAgB;YACxB,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,IAAI,KAAK,sBAAsB;gBAC/B,CAAC,CAAC,sHAAsH;gBACxH,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,sBAAsB;oBAC7D,CAAC,CAAC,qFAAqF;oBACvF,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,sBAAsB;wBAC/D,CAAC,CAAC,6EAA6E;wBAC/E,CAAC,CAAC,IAAI,KAAK,kBAAkB;4BAC3B,CAAC,CAAC,4EAA4E;4BAC9E,CAAC,CAAC,IAAI,KAAK,mBAAmB;gCAC5B,CAAC,CAAC,4FAA4F;gCAC9F,CAAC,CAAC,IAAI,KAAK,iBAAiB;oCAC1B,CAAC,CAAC,wGAAwG;oCAC1G,CAAC,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,CAAC,QAAQ,CAAC;wCACxB,IAAI,KAAK,oBAAoB;wCAC/B,CAAC,CAAC,kEAAkE;wCACpE,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC;4CACvC,CAAC,CAAC,oEAAoE;4CACtE,CAAC,CAAC,8DAA8D,CAAC,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACtD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,qCAAqC,EAChD,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,8BAA8B,QACzC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mCACxC,CAAC,IAAI,KAAK,sBAAsB;YAC9B,CAAC,CAAC,iGAAiG;YACnG,CAAC,CAAC,IAAI,KAAK,YAAY;gBACrB,CAAC,CAAC,wEAAwE;gBAC1E,CAAC,CAAC,IAAI,KAAK,uBAAuB;oBAChC,CAAC,CAAC,gKAAgK;oBAClK,CAAC,CAAC,IAAI,KAAK,uBAAuB;wBAChC,CAAC,CAAC,yJAAyJ;wBAC3J,CAAC,CAAC,IAAI,KAAK,wBAAwB;4BACjC,CAAC,CAAC,0FAA0F,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,yCAAyC;4BAClN,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,iBAAiB;gCACvD,CAAC,CAAC,+GAA+G;gCACjH,CAAC,CAAC,IAAI,KAAK,eAAe;oCACxB,CAAC,CAAC,oFAAoF;oCACtF,CAAC,CAAC,IAAI,KAAK,wBAAwB;wCACjC,CAAC,CAAC,mEAAmE;wCACrE,CAAC,CAAC,IAAI,KAAK,qBAAqB;4CAC9B,CAAC,CAAC,uFAAuF;4CACzF,CAAC,CAAC,IAAI,KAAK,0BAA0B;gDACnC,CAAC,CAAC,wFAAwF;gDAC1F,CAAC,CAAC,IAAI,KAAK,sBAAsB;oDAC/B,CAAC,CAAC,wFAAwF;oDAC1F,CAAC,CAAC,IAAI,KAAK,mBAAmB;wDAC5B,CAAC,CAAC,sDAAsD;wDACxD,CAAC,CAAC,4BAA4B,CAAC,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACvC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE,kBACrC,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,KAAK,IAAI;gBACd,OAAQ,KAA+B,CAAC,OAAO,KAAK,QAAQ;gBAC1D,CAAC,CAAC;oBACE,KAAK,MAAM,OAAE,KAA4B,CAAC,IAAI,mCAAI,QAAQ,CAAC,KAAM,KAA6B,CAAC,OAAO,EAAE;iBACzG;gBACH,CAAC,CAAC,EAAE,GAAA,CACP;YACH,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,eAAe,CACnB,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,yBAAyB,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5D,kCAAkC,CACnC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,eAAe,CACnB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,eAAe,EAC1B,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACzD,MAAM,eAAe,CACnB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,8BAA8B,EACzC,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC7D,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,qCAAqC,EAChD,4KAA4K,CAC7K,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;QAC9C,MAAM,YAAY,CAAC,OAAO,EAAE,8CAA8C,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,cAAc,QAAQ,CAAC,MAAM,GAAG,EACnD,QAAQ,CAAC,MAAM,IAAI,GAAG;YACpB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,+DAA+D,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,CAChB,GAAG,IAAI,gEAAgE,EACvE,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,iFAAiF;AACjF,MAAM,eAAe,GAA2B;IAC9C,eAAe,EACb,mFAAmF;IACrF,eAAe,EACb,4EAA4E;IAC9E,YAAY,EACV,yFAAyF;IAC3F,cAAc,EACZ,+KAA+K;IACjL,gBAAgB,EACd,4LAA4L;IAC9L,4BAA4B,EAC1B,6MAA6M;IAC/M,cAAc,EAAE,6DAA6D;IAC7E,WAAW,EACT,kFAAkF;IACpF,WAAW,EACT,sGAAsG;IACxG,WAAW,EACT,uIAAuI;IACzI,mBAAmB,EACjB,iEAAiE;IACnE,mBAAmB,EACjB,+EAA+E;IACjF,YAAY,EACV,wGAAwG;IAC1G,aAAa,EACX,4GAA4G;IAC9G,WAAW,EACT,+FAA+F;IACjG,eAAe,EACb,oGAAoG;IACtG,2BAA2B,EACzB,+HAA+H;CAClI,CAAC;AAEF,KAAK,UAAU,gBAAgB,CAC7B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;eAAO,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import {\n  type AudienceCreateRequest,\n  type AudienceListResponse,\n  AudienceListResponseSchema,\n  type AudienceResponse,\n  AudienceResponseSchema,\n  type AudienceUpdateRequest,\n  type MemberAudience,\n  MemberAudienceSchema,\n  type MemberAudienceSetResult,\n  MemberAudienceSetResultSchema,\n  type TeamAudience,\n  TeamAudienceSchema,\n  type TeamAudienceSetResult,\n  TeamAudienceSetResultSchema,\n  type ProductScopeList,\n  ProductScopeListSchema,\n  type ProductScopeProductChange,\n  ProductScopeProductChangeSchema,\n  type TeamScopes,\n  TeamScopesSchema,\n  type TeamScopesSetResult,\n  TeamScopesSetResultSchema,\n  type TeamAppSetResult,\n  TeamAppSetResultSchema,\n  type TeamCreateRequest,\n  type TeamCreateResult,\n  TeamCreateResultSchema,\n  type TeamDisconnectResult,\n  TeamDisconnectResultSchema,\n  type TeamMemberChangeResult,\n  TeamMemberChangeResultSchema,\n  type TeamMemberAddResult,\n  TeamMemberAddResultSchema,\n  type TeamMemberInviteResult,\n  TeamMemberInviteResultSchema,\n  type TeamMemberList,\n  TeamMemberListSchema,\n  type TeamRenameResult,\n  TeamRenameResultSchema,\n  type TeamRoles,\n  TeamRolesSchema,\n  type TeamIntegrationStatus,\n  TeamIntegrationStatusSchema,\n  type TeamIntegrationEventList,\n  TeamIntegrationEventListSchema,\n  type TeamList,\n  TeamListSchema,\n  type TeamWebhookMintResult,\n  TeamWebhookMintResultSchema,\n} from '@ekanos/integration-schema';\nimport type { z } from 'zod';\n\nimport { request } from './auth/ekanos-api';\nimport {\n  authRequiredError,\n  forbiddenError,\n  invalidStateError,\n  networkError,\n  notFoundError,\n  usageError,\n  validationError,\n} from './errors';\n\n/**\n * The CLI's client for a Source's teams and their integration setup — the\n * team-level counterpart of `apps-api.ts`.\n *\n *   GET  /api/partner/teams?source=<slug>                              → TeamList\n *   GET  /api/partner/teams/<team>/integrations/<product>?source=<slug> → TeamIntegrationStatus\n *   PUT  …/integrations/<product>/app?source=<slug>  { connectionId?, fields }\n *                                                                      → TeamAppSetResult\n *   POST …/integrations/<product>/webhooks/<id>?source=<slug>         → TeamWebhookMintResult\n *   DELETE /api/partner/teams/<team>/integrations/<product>?source=<slug> → TeamDisconnectResult\n *   POST /api/partner/teams?source=<slug>  { name, slug?, ownerEmail? } → TeamCreateResult\n *   PATCH /api/partner/teams/<team>?source=<slug>  { name }           → TeamRenameResult\n *   GET  /api/partner/teams/<team>/members?source=<slug>               → TeamMemberList\n *   POST …/<team>/members?source=<slug>  { email, role }               → TeamMemberInviteResult\n *   PATCH  …/<team>/members/<email>?source=<slug>  { role }            → TeamMemberChangeResult\n *   DELETE …/<team>/members/<email>?source=<slug>                      → TeamMemberChangeResult\n *   GET  /api/partner/teams/<team>/roles?source=<slug>                 → TeamRoles\n *   GET  /api/partner/teams/<team>/events?source=<slug>[&product=<slug>]\n *        [&since=<iso>][&limit=<n>]                                    → TeamIntegrationEventList\n *   GET  /api/partner/scopes?source=<slug>                             → ProductScopeList\n *   PUT | DELETE /api/partner/scopes/<scope>/products/<product>?source=<slug>\n *                                                                      → ProductScopeProductChange\n *   GET  /api/partner/audiences?source=<slug>                          → AudienceListResponse\n *   GET | PATCH /api/partner/audiences/<audience>?source=<slug>        → AudienceResponse\n *   POST /api/partner/audiences?source=<slug>  { name, … }             → AudienceResponse\n *   GET | PUT /api/partner/teams/<team>/audience?source=<slug>  { audienceId }\n *                                                                      → TeamAudience | TeamAudienceSetResult\n *   GET | PUT …/<team>/members/<email>/audience?source=<slug>  { audienceId | null }\n *                                                                      → MemberAudience | MemberAudienceSetResult\n *   GET  /api/partner/teams/<team>/scopes?source=<slug>                → TeamScopes\n *   PUT  /api/partner/teams/<team>/scopes?source=<slug>  { scopes }   → TeamScopesSetResult\n *\n *   → 401 / 3xx  refresh once and retry\n *   → 403 { code: \"SOURCE_ADMIN_REQUIRED\" | \"MFA_REQUIRED\" | \"FORBIDDEN\" }\n *   → 404 { code: \"TEAM_NOT_FOUND\" | \"PRODUCT_NOT_ENTITLED\" | \"WEBHOOK_NOT_FOUND\"\n *               | \"CONNECTION_NOT_FOUND\" | \"SOURCE_NOT_FOUND\" }\n *               | \"MEMBER_NOT_FOUND\" }\n *   → 409 { code: \"NO_TEAM_APP\" | \"SLUG_TAKEN\" | \"TEAM_ACCOUNTS_DISABLED\"\n *               | \"ALREADY_MEMBER\" | \"ALREADY_INVITED\" | \"PRIMARY_OWNER\" }\n *   → 400 { code: \"INVALID_FIELDS\" | \"INVALID_REQUEST\" | \"UNKNOWN_ROLE\" }\n */\n\nexport type TeamsApiResult<T> =\n  | { status: 'ok'; data: T }\n  | { status: 'unauthorized' };\n\nexport function listTeams(\n  host: string,\n  accessToken: string,\n  source: string,\n): Promise<TeamsApiResult<TeamList>> {\n  return call(host, accessToken, TeamListSchema, {\n    method: 'GET',\n    path: '/api/partner/teams',\n    source,\n  });\n}\n\nexport function showTeamIntegration(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; product: string },\n): Promise<TeamsApiResult<TeamIntegrationStatus>> {\n  return call(host, accessToken, TeamIntegrationStatusSchema, {\n    method: 'GET',\n    path: integrationPath(target),\n    source: target.source,\n  });\n}\n\nexport function setTeamApp(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; product: string },\n  body: {\n    connectionId?: string;\n    fields: Record<string, string>;\n    clear?: string[];\n  },\n): Promise<TeamsApiResult<TeamAppSetResult>> {\n  return call(host, accessToken, TeamAppSetResultSchema, {\n    method: 'PUT',\n    path: `${integrationPath(target)}/app`,\n    source: target.source,\n    body,\n  });\n}\n\nexport function mintTeamWebhook(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; product: string },\n  webhookId: string,\n): Promise<TeamsApiResult<TeamWebhookMintResult>> {\n  return call(host, accessToken, TeamWebhookMintResultSchema, {\n    method: 'POST',\n    path: `${integrationPath(target)}/webhooks/${encodeURIComponent(webhookId)}`,\n    source: target.source,\n  });\n}\n\nexport function disconnectTeamIntegration(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; product: string; mine?: boolean },\n): Promise<TeamsApiResult<TeamDisconnectResult>> {\n  return call(host, accessToken, TeamDisconnectResultSchema, {\n    method: 'DELETE',\n    // `--mine`: the caller's own personal connection, never another's.\n    path: `${integrationPath(target)}${target.mine ? '/mine' : ''}`,\n    source: target.source,\n  });\n}\n\nexport function createTeam(\n  host: string,\n  accessToken: string,\n  source: string,\n  body: TeamCreateRequest,\n): Promise<TeamsApiResult<TeamCreateResult>> {\n  return call(host, accessToken, TeamCreateResultSchema, {\n    method: 'POST',\n    path: '/api/partner/teams',\n    source,\n    body,\n  });\n}\n\nexport function renameTeam(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  name: string,\n): Promise<TeamsApiResult<TeamRenameResult>> {\n  return call(host, accessToken, TeamRenameResultSchema, {\n    method: 'PATCH',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}`,\n    source: target.source,\n    body: { name },\n  });\n}\n\nexport function listTeamMembers(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n): Promise<TeamsApiResult<TeamMemberList>> {\n  return call(host, accessToken, TeamMemberListSchema, {\n    method: 'GET',\n    path: membersPath(target.team),\n    source: target.source,\n  });\n}\n\nexport function inviteTeamMember(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  body: { email: string; role: string },\n): Promise<TeamsApiResult<TeamMemberInviteResult>> {\n  return call(host, accessToken, TeamMemberInviteResultSchema, {\n    method: 'POST',\n    path: membersPath(target.team),\n    source: target.source,\n    body,\n  });\n}\n\n/** `teams members add`: a member now, no invitation email (`PUT`). */\nexport function addTeamMember(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  body: { self: true; role?: string } | { email: string; role?: string },\n): Promise<TeamsApiResult<TeamMemberAddResult>> {\n  return call(host, accessToken, TeamMemberAddResultSchema, {\n    method: 'PUT',\n    path: membersPath(target.team),\n    source: target.source,\n    body,\n  });\n}\n\nexport function setTeamMemberRole(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; email: string },\n  role: string,\n): Promise<TeamsApiResult<TeamMemberChangeResult>> {\n  return call(host, accessToken, TeamMemberChangeResultSchema, {\n    method: 'PATCH',\n    path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}`,\n    source: target.source,\n    body: { role },\n  });\n}\n\nexport function removeTeamMember(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; email: string },\n): Promise<TeamsApiResult<TeamMemberChangeResult>> {\n  return call(host, accessToken, TeamMemberChangeResultSchema, {\n    method: 'DELETE',\n    path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}`,\n    source: target.source,\n  });\n}\n\nexport function listProductScopes(\n  host: string,\n  accessToken: string,\n  source: string,\n): Promise<TeamsApiResult<ProductScopeList>> {\n  return call(host, accessToken, ProductScopeListSchema, {\n    method: 'GET',\n    path: '/api/partner/scopes',\n    source,\n  });\n}\n\nexport function setScopeProduct(\n  host: string,\n  accessToken: string,\n  target: { source: string; scope: string; product: string },\n  included: boolean,\n): Promise<TeamsApiResult<ProductScopeProductChange>> {\n  return call(host, accessToken, ProductScopeProductChangeSchema, {\n    method: included ? 'PUT' : 'DELETE',\n    path: `/api/partner/scopes/${encodeURIComponent(target.scope)}/products/${encodeURIComponent(target.product)}`,\n    source: target.source,\n  });\n}\n\nexport function showTeamScopes(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n): Promise<TeamsApiResult<TeamScopes>> {\n  return call(host, accessToken, TeamScopesSchema, {\n    method: 'GET',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/scopes`,\n    source: target.source,\n  });\n}\n\nexport function setTeamScopes(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  scopes: string[],\n): Promise<TeamsApiResult<TeamScopesSetResult>> {\n  return call(host, accessToken, TeamScopesSetResultSchema, {\n    method: 'PUT',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/scopes`,\n    source: target.source,\n    body: { scopes },\n  });\n}\n\nexport function listAudiences(\n  host: string,\n  accessToken: string,\n  source: string,\n): Promise<TeamsApiResult<AudienceListResponse>> {\n  return call(host, accessToken, AudienceListResponseSchema, {\n    method: 'GET',\n    path: '/api/partner/audiences',\n    source,\n  });\n}\n\nexport function showAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; audience: string },\n): Promise<TeamsApiResult<AudienceResponse>> {\n  return call(host, accessToken, AudienceResponseSchema, {\n    method: 'GET',\n    path: `/api/partner/audiences/${encodeURIComponent(target.audience)}`,\n    source: target.source,\n  });\n}\n\nexport function createAudience(\n  host: string,\n  accessToken: string,\n  source: string,\n  body: AudienceCreateRequest,\n): Promise<TeamsApiResult<AudienceResponse>> {\n  return call(host, accessToken, AudienceResponseSchema, {\n    method: 'POST',\n    path: '/api/partner/audiences',\n    source,\n    body,\n  });\n}\n\nexport function updateAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; audience: string },\n  body: AudienceUpdateRequest,\n): Promise<TeamsApiResult<AudienceResponse>> {\n  return call(host, accessToken, AudienceResponseSchema, {\n    method: 'PATCH',\n    path: `/api/partner/audiences/${encodeURIComponent(target.audience)}`,\n    source: target.source,\n    body,\n  });\n}\n\nexport function showTeamAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n): Promise<TeamsApiResult<TeamAudience>> {\n  return call(host, accessToken, TeamAudienceSchema, {\n    method: 'GET',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/audience`,\n    source: target.source,\n  });\n}\n\nexport function setTeamAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  audienceId: string,\n): Promise<TeamsApiResult<TeamAudienceSetResult>> {\n  return call(host, accessToken, TeamAudienceSetResultSchema, {\n    method: 'PUT',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/audience`,\n    source: target.source,\n    body: { audienceId },\n  });\n}\n\nexport function showMemberAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; email: string },\n): Promise<TeamsApiResult<MemberAudience>> {\n  return call(host, accessToken, MemberAudienceSchema, {\n    method: 'GET',\n    path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}/audience`,\n    source: target.source,\n  });\n}\n\n/** `audienceId: null` clears the member's own audience. */\nexport function setMemberAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; email: string },\n  audienceId: string | null,\n): Promise<TeamsApiResult<MemberAudienceSetResult>> {\n  return call(host, accessToken, MemberAudienceSetResultSchema, {\n    method: 'PUT',\n    path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}/audience`,\n    source: target.source,\n    body: { audienceId },\n  });\n}\n\nexport function listTeamRoles(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n): Promise<TeamsApiResult<TeamRoles>> {\n  return call(host, accessToken, TeamRolesSchema, {\n    method: 'GET',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/roles`,\n    source: target.source,\n  });\n}\n\nexport function listTeamEvents(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  filters: { product?: string; since?: string; limit?: number },\n): Promise<TeamsApiResult<TeamIntegrationEventList>> {\n  const query = new URLSearchParams();\n  if (filters.product) query.set('product', filters.product);\n  if (filters.since) query.set('since', filters.since);\n  if (filters.limit !== undefined) query.set('limit', String(filters.limit));\n  const encoded = query.toString();\n  const suffix = encoded ? `?${encoded}` : '';\n  return call(host, accessToken, TeamIntegrationEventListSchema, {\n    method: 'GET',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/events${suffix}`,\n    source: target.source,\n  });\n}\n\nfunction membersPath(team: string): string {\n  return `/api/partner/teams/${encodeURIComponent(team)}/members`;\n}\n\nfunction integrationPath(target: { team: string; product: string }): string {\n  return `/api/partner/teams/${encodeURIComponent(target.team)}/integrations/${encodeURIComponent(target.product)}`;\n}\n\n/** One partner teams call; shared by the team-agent clients (`team-agents-api.ts`). */\nexport async function call<T>(\n  host: string,\n  accessToken: string,\n  schema: z.ZodType<T>,\n  init: {\n    method: 'GET' | 'PUT' | 'POST' | 'PATCH' | 'DELETE';\n    path: string;\n    source: string;\n    body?: unknown;\n  },\n): Promise<TeamsApiResult<T>> {\n  const response = await request(\n    `${host}${init.path}${init.path.includes('?') ? '&' : '?'}${new URLSearchParams({ source: init.source })}`,\n    {\n      method: init.method,\n      headers: {\n        accept: 'application/json',\n        authorization: `Bearer ${accessToken}`,\n        ...(init.body === undefined\n          ? {}\n          : { 'content-type': 'application/json' }),\n      },\n      body: init.body === undefined ? undefined : JSON.stringify(init.body),\n    },\n  );\n\n  if (\n    response.status === 401 ||\n    (response.status >= 300 && response.status < 400)\n  ) {\n    return { status: 'unauthorized' };\n  }\n\n  const body = await readOptionalJson(response);\n  const code = typeof body.code === 'string' ? body.code : null;\n  const message =\n    typeof body.error === 'string' && body.error ? body.error : null;\n\n  if (response.status === 403 && code === 'MFA_REQUIRED') {\n    throw authRequiredError(\n      message ?? `${host} requires multi-factor authentication.`,\n      'Complete MFA in the browser, then run \"ekanos login\" again.',\n    );\n  }\n  if (response.status === 403) {\n    throw forbiddenError(\n      message ?? 'Not permitted on this Source.',\n      code === 'SOURCE_ADMIN_REQUIRED'\n        ? \"Only a Source admin manages its teams' integrations. Ask one to run it.\"\n        : code === 'CONFIRM_NOT_PERMITTED'\n          ? \"Only a Source admin of the team's Source, or someone who manages the team's agents, confirms what an agent may use.\"\n          : code === 'PERSONAL_AGENT_CREATOR_ONLY'\n            ? 'A personal agent acts with its creator\\'s own connections, so only they change it, run it, decide its approvals or cancel its runs. \"ekanos teams agents list <team>\" shows whose each agent is.'\n            : code === 'NOT_A_TEAM_MEMBER'\n              ? 'Add yourself to the team first (\"ekanos teams members add <team> --self\"), then run this again.'\n              : code === 'AGENTS_MANAGE_REQUIRED'\n                ? 'Take a role on the team that holds agents.manage (\"ekanos teams roles list <team>\"), or make it your own agent with --personal.'\n                : code === 'PERSONAL_AGENT_CHANNEL_TRIGGER'\n                  ? 'Add a schedule or a webhook trigger instead: \"ekanos teams triggers add <team> <key> schedule|webhook --prompt ...\".'\n                  : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 404) {\n    throw notFoundError(\n      message ?? 'Not found.',\n      (code ? LIFECYCLE_HINTS[code] : undefined) ??\n        (code === 'TEAM_NOT_FOUND'\n          ? 'Run \"ekanos teams list\" to see the teams on this Source.'\n          : code === 'PRODUCT_NOT_ENTITLED'\n            ? '\"ekanos sources products\" shows what this Source has; only a super-admin enables a product for a Source (in /admin).'\n            : code === 'SCOPE_NOT_FOUND' || code === 'PRODUCT_NOT_IN_SCOPE'\n              ? 'Run \"ekanos sources scopes\" to see the Source\\'s product scopes and their products.'\n              : code === 'WEBHOOK_NOT_FOUND' || code === 'CONNECTION_NOT_FOUND'\n                ? 'Run \"ekanos teams show <team> <product>\" to see its team apps and webhooks.'\n                : code === 'MEMBER_NOT_FOUND'\n                  ? 'Run \"ekanos teams members list <team>\" to see its members and invitations.'\n                  : code === 'NOT_A_SOURCE_USER'\n                    ? 'Invite them instead, by email: \"ekanos teams members invite <team> <email> --role <role>\".'\n                    : code === 'SKILL_NOT_FOUND'\n                      ? 'Run \"ekanos skills list --team <team>\" (and \"ekanos skills list\") to see the skills this team can use.'\n                      : code?.startsWith('AGENT_') ||\n                          code === 'TEMPLATE_NOT_FOUND'\n                        ? 'Run \"ekanos teams agents list <team>\" to see the team\\'s agents.'\n                        : /^(TRIGGER|LINK|MCP)_/.test(code ?? '')\n                          ? 'List them first: \"ekanos teams triggers|links|mcp list <team> ...\"'\n                          : 'Run \"ekanos sources\" to list the sources you hold a seat on.'),\n    );\n  }\n  if (response.status === 409 && code === 'NO_TEAM_APP') {\n    throw invalidStateError(\n      message ?? 'This integration takes no team app.',\n      'Teams connect through the Source\\'s app: \"ekanos apps show <product>\".',\n    );\n  }\n  if (response.status === 409 || response.status === 422) {\n    throw invalidStateError(\n      message ?? 'The host refused the change.',\n      (code ? LIFECYCLE_HINTS[code] : undefined) ??\n        (code === 'AUDIENCE_SET_ON_TEAM'\n          ? 'Set the team’s instead: \"ekanos teams audience <team> <audience>\". A person’s groups narrow it.'\n          : code === 'SLUG_TAKEN'\n            ? 'Pick another with --slug, or run \"ekanos teams list\" to see the teams.'\n            : code === 'AGENT_VERSION_CHANGED'\n              ? 'A newer version was published since it was shown to you. Review it with \"ekanos teams agents show <team> <key>\", then run \"ekanos teams agents confirm\" again.'\n              : code === 'ROLE_NEEDS_ACCEPTANCE'\n                ? 'Add them with a lower role (--role admin), or invite them to the top role so they accept it: \"ekanos teams members invite <team> <email> --role owner\".'\n                : code === 'AGENT_VERSION_CONFLICT'\n                  ? `Review it with \"ekanos teams agents show <team> <key>\", then apply with --base-version ${typeof body.latestVersion === 'number' ? body.latestVersion : '<its version>'} (or --overwrite to replace it anyway).`\n                  : code === 'ALREADY_MEMBER' || code === 'ALREADY_INVITED'\n                    ? 'Run \"ekanos teams members list <team>\"; change a role with \"ekanos teams members role <team> <email> <role>\".'\n                    : code === 'PRIMARY_OWNER'\n                      ? \"The primary owner's ownership is transferred in the app (team Settings → Members).\"\n                      : code === 'TEAM_ACCOUNTS_DISABLED'\n                        ? 'Ekanos switches team accounts on for a Source; ask a super-admin.'\n                        : code === 'PERSONAL_CONNECTION'\n                          ? 'Each member disconnects their own: \"ekanos teams disconnect <team> <product> --mine\".'\n                          : code === 'MCP_SERVER_FROM_TEMPLATE'\n                            ? 'It stays while the agent template declares it: change the template, apply and publish.'\n                            : code === 'PRODUCT_NOT_ENTITLED'\n                              ? '\"ekanos sources products\" shows what this Source has; only those can be in its scopes.'\n                              : code === 'TEMPLATE_ARCHIVED'\n                                ? 'Unarchive it first: \"ekanos agents unarchive <key>\".'\n                                : 'See \"ekanos teams --help\".'),\n    );\n  }\n  if (response.status === 400 && code === 'INVALID_AGENT') {\n    const issues = Array.isArray(body.issues)\n      ? body.issues.flatMap((issue: unknown) =>\n          typeof issue === 'object' &&\n          issue !== null &&\n          typeof (issue as { message?: unknown }).message === 'string'\n            ? [\n                `  ${String((issue as { path?: unknown }).path ?? '(root)')}: ${(issue as { message: string }).message}`,\n              ]\n            : [],\n        )\n      : [];\n    throw validationError(\n      [message ?? 'The agent is not valid.', ...issues].join('\\n'),\n      'Fix agent.json and run it again.',\n    );\n  }\n  if (response.status === 400 && code === 'UNKNOWN_ROLE') {\n    throw validationError(\n      message ?? 'No such role.',\n      'Run \"ekanos teams roles list <team>\" for the roles this Source uses.',\n    );\n  }\n  if (response.status === 400 && code === 'INVALID_FIELDS') {\n    throw validationError(\n      message ?? 'The host refused the fields.',\n      'Run \"ekanos teams app set <team> <product>\" again.',\n    );\n  }\n  if (response.status === 400 && code === 'SECRET_AS_ARGUMENT') {\n    throw usageError(\n      message ?? 'A secret was passed as an argument.',\n      'Leave that field out of --set: pass it with --set-secret <field>=env:<NAME>|file:<path>|stdin or --browser, or run the command at your terminal, which asks for it hidden.',\n    );\n  }\n  if (response.status === 400) {\n    throw usageError(\n      message ?? 'The host refused the request.',\n      'See \"ekanos teams --help\".',\n    );\n  }\n  if (response.status >= 500 && code && message) {\n    throw networkError(message, 'The host could not finish it; retry shortly.');\n  }\n  if (!response.ok) {\n    throw networkError(\n      `${host}${init.path} responded ${response.status}.`,\n      response.status >= 500\n        ? 'The Ekanos deployment returned a server error. Retry shortly.'\n        : 'Confirm the host runs a build that includes the teams routes.',\n    );\n  }\n\n  const parsed = schema.safeParse(body.data);\n  if (!parsed.success) {\n    throw networkError(\n      `${host}/api/partner/teams answered in a shape this CLI does not read.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the teams contract.',\n    );\n  }\n  return { status: 'ok', data: parsed.data };\n}\n\n/** Next steps for the refusals of the team lifecycle, roles and groups calls. */\nconst LIFECYCLE_HINTS: Record<string, string> = {\n  GROUP_NOT_FOUND:\n    'Run \"ekanos teams groups list <team>\" to see its groups (name one by name or id).',\n  GROUP_AMBIGUOUS:\n    'Run \"ekanos teams groups list <team> --json\" and name the group by its id.',\n  GROUP_EXISTS:\n    'Pick another name, or change that group: \"ekanos teams groups update <team> <group> …\".',\n  GROUP_IMPLICIT:\n    'Everyone holds each member in no other group, so it is not edited and has no members to add or remove: add them to another group instead (\"ekanos teams groups list <team>\").',\n  GROUP_PREDEFINED:\n    'A predefined group belongs to the team’s business type and is removed with the Source’s audiences, not from one team. Change its products or members here, or delete a team group instead.',\n  PRODUCT_NOT_IN_BUSINESS_TYPE:\n    'A group picks only within the team’s audience: \"ekanos teams audience <team>\" names it, \"ekanos audiences show <audience>\" lists its products, and \"ekanos audiences set <audience> --products …\" adds one.',\n  ROLE_NOT_FOUND: 'Run \"ekanos sources roles list\" to see the Source\\'s roles.',\n  ROLE_EXISTS:\n    'Change it instead: \"ekanos sources roles update <role> …\", or pick another name.',\n  SYSTEM_ROLE:\n    'Owner, admin and member are fixed; create a custom role with \"ekanos sources roles create <name> …\".',\n  ROLE_IN_USE:\n    'Give its members another role first: \"ekanos teams members role <team> <email> <role>\"; \"ekanos sources people\" shows who holds what.',\n  WORKSPACE_NOT_FOUND:\n    'Run \"ekanos teams workspace list <team>\" to see its workspaces.',\n  WORKSPACES_DISABLED:\n    'Workspaces are a Source Flag (enable_workspaces) only a super-admin switches.',\n  NOT_A_MEMBER:\n    'Run \"ekanos teams members list <team>\" to see who is on it; you leave only a team you are a member of.',\n  NOT_CONNECTED:\n    'Connect it first: \"ekanos teams connect <team> <product>\"; \"ekanos teams health <team>\" lists what it has.',\n  USER_SCOPED:\n    'Each person connects it for themselves and checks it on their own Integrations → Health page.',\n  NO_HEALTH_CHECK:\n    'The product has no package on this deployment; \"ekanos sources products\" shows what is registered.',\n  PRODUCT_NOT_VISIBLE_TO_TEAM:\n    'Run \"ekanos teams audience <team>\" for the team’s audience, and \"ekanos audiences show <audience>\" for the products it shows.',\n};\n\nasync function readOptionalJson(\n  response: Response,\n): Promise<Record<string, unknown>> {\n  try {\n    const parsed: unknown = await response.json();\n    return typeof parsed === 'object' && parsed !== null\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n"]}
+{"version":3,"file":"teams-api.js","sourceRoot":"","sources":["../src/teams-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,0BAA0B,EAE1B,sBAAsB,EAGtB,oBAAoB,EAEpB,6BAA6B,EAE7B,kBAAkB,EAElB,2BAA2B,EAE3B,sBAAsB,EAEtB,+BAA+B,EAE/B,gBAAgB,EAEhB,yBAAyB,EAEzB,sBAAsB,EAGtB,sBAAsB,EAEtB,0BAA0B,EAE1B,4BAA4B,EAE5B,yBAAyB,EAEzB,4BAA4B,EAE5B,oBAAoB,EAEpB,sBAAsB,EAEtB,eAAe,EAEf,2BAA2B,EAE3B,8BAA8B,EAE9B,cAAc,EAEd,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAgDlB,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,WAAmB,EACnB,MAAc;IAEd,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE;QAC7C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB;QAC1B,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,WAAmB,EACnB,MAAyD;IAEzD,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;QAC1D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,WAAmB,EACnB,MAAyD,EACzD,IAIC;IAED,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM;QACtC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAAyD,EACzD,SAAiB;IAEjB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE;QAC5E,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,IAAY,EACZ,WAAmB,EACnB,MAAyE;IAEzE,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE;QACzD,MAAM,EAAE,QAAQ;QAChB,mEAAmE;QACnE,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/D,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,WAAmB,EACnB,MAAc,EACd,IAAuB;IAEvB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,oBAAoB;QAC1B,MAAM;QACN,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,IAAY;IAEZ,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QAC7D,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,IAAI,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACnD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,IAAqC;IAErC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,IAAsE;IAEtE,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACxD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAuD,EACvD,IAAY;IAEZ,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC3D,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACvE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,IAAI,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAAuD;IAEvD,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC3D,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACvE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAc;IAEd,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,qBAAqB;QAC3B,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAA0D,EAC1D,QAAiB;IAEjB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,+BAA+B,EAAE;QAC9D,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACnC,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAC9G,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS;QACpE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,MAAgB;IAEhB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACxD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS;QACpE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,MAAM,EAAE;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAc;IAEd,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE;QACzD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;QAC9B,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,WAAmB,EACnB,MAA4C;IAE5C,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACrE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAAc,EACd,IAA2B;IAE3B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;QAC9B,MAAM;QACN,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAA4C,EAC5C,IAA2B;IAE3B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACrE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE;QACjD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;QACtE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,UAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;QAC1D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;QACtE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,UAAU,EAAE;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,WAAmB,EACnB,MAAuD;IAEvD,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACnD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW;QAChF,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAuD,EACvD,UAAyB;IAEzB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE;QAC5D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW;QAChF,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,UAAU,EAAE;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE;QAC9C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;QACnE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAAwC,EACxC,OAA6D;IAE7D,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,OAAO;QAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,8BAA8B,EAAE;QAC7D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,MAAM,EAAE;QAC7E,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CAAC,MAAyC;IAChE,OAAO,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AACpH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAY,EACZ,WAAmB,EACnB,MAAoB,EACpB,IAKC;;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAC1G;QACE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,kBACL,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,UAAU,WAAW,EAAE,IACnC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC5C;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CACF,CAAC;IAEF,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,IAAI,wCAAwC,EAC1D,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,CAClB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,uBAAuB;YAC9B,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,IAAI,KAAK,uBAAuB;gBAChC,CAAC,CAAC,qHAAqH;gBACvH,CAAC,CAAC,IAAI,KAAK,6BAA6B;oBACtC,CAAC,CAAC,kMAAkM;oBACpM,CAAC,CAAC,IAAI,KAAK,mBAAmB;wBAC5B,CAAC,CAAC,iGAAiG;wBACnG,CAAC,CAAC,IAAI,KAAK,wBAAwB;4BACjC,CAAC,CAAC,iIAAiI;4BACnI,CAAC,CAAC,IAAI,KAAK,gCAAgC;gCACzC,CAAC,CAAC,sHAAsH;gCACxH,CAAC,CAAC,8DAA8D,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,CACjB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,YAAY,QACvB,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mCACxC,CAAC,IAAI,KAAK,gBAAgB;YACxB,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,IAAI,KAAK,sBAAsB;gBAC/B,CAAC,CAAC,mGAAmG;gBACrG,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,sBAAsB;oBAC7D,CAAC,CAAC,qFAAqF;oBACvF,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,sBAAsB;wBAC/D,CAAC,CAAC,6EAA6E;wBAC/E,CAAC,CAAC,IAAI,KAAK,kBAAkB;4BAC3B,CAAC,CAAC,4EAA4E;4BAC9E,CAAC,CAAC,IAAI,KAAK,mBAAmB;gCAC5B,CAAC,CAAC,4FAA4F;gCAC9F,CAAC,CAAC,IAAI,KAAK,iBAAiB;oCAC1B,CAAC,CAAC,wGAAwG;oCAC1G,CAAC,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,CAAC,QAAQ,CAAC;wCACxB,IAAI,KAAK,oBAAoB;wCAC/B,CAAC,CAAC,kEAAkE;wCACpE,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC;4CACvC,CAAC,CAAC,oEAAoE;4CACtE,CAAC,CAAC,8DAA8D,CAAC,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACtD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,qCAAqC,EAChD,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,8BAA8B,QACzC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mCACxC,CAAC,IAAI,KAAK,sBAAsB;YAC9B,CAAC,CAAC,iGAAiG;YACnG,CAAC,CAAC,IAAI,KAAK,YAAY;gBACrB,CAAC,CAAC,wEAAwE;gBAC1E,CAAC,CAAC,IAAI,KAAK,uBAAuB;oBAChC,CAAC,CAAC,gKAAgK;oBAClK,CAAC,CAAC,IAAI,KAAK,uBAAuB;wBAChC,CAAC,CAAC,yJAAyJ;wBAC3J,CAAC,CAAC,IAAI,KAAK,wBAAwB;4BACjC,CAAC,CAAC,0FAA0F,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,yCAAyC;4BAClN,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,iBAAiB;gCACvD,CAAC,CAAC,+GAA+G;gCACjH,CAAC,CAAC,IAAI,KAAK,eAAe;oCACxB,CAAC,CAAC,oFAAoF;oCACtF,CAAC,CAAC,IAAI,KAAK,wBAAwB;wCACjC,CAAC,CAAC,4DAA4D;wCAC9D,CAAC,CAAC,IAAI,KAAK,qBAAqB;4CAC9B,CAAC,CAAC,uFAAuF;4CACzF,CAAC,CAAC,IAAI,KAAK,0BAA0B;gDACnC,CAAC,CAAC,wFAAwF;gDAC1F,CAAC,CAAC,IAAI,KAAK,sBAAsB;oDAC/B,CAAC,CAAC,wFAAwF;oDAC1F,CAAC,CAAC,IAAI,KAAK,mBAAmB;wDAC5B,CAAC,CAAC,sDAAsD;wDACxD,CAAC,CAAC,4BAA4B,CAAC,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACvC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE,kBACrC,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,KAAK,IAAI;gBACd,OAAQ,KAA+B,CAAC,OAAO,KAAK,QAAQ;gBAC1D,CAAC,CAAC;oBACE,KAAK,MAAM,OAAE,KAA4B,CAAC,IAAI,mCAAI,QAAQ,CAAC,KAAM,KAA6B,CAAC,OAAO,EAAE;iBACzG;gBACH,CAAC,CAAC,EAAE,GAAA,CACP;YACH,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,eAAe,CACnB,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,yBAAyB,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5D,kCAAkC,CACnC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,eAAe,CACnB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,eAAe,EAC1B,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACzD,MAAM,eAAe,CACnB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,8BAA8B,EACzC,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC7D,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,qCAAqC,EAChD,4KAA4K,CAC7K,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;QAC9C,MAAM,YAAY,CAAC,OAAO,EAAE,8CAA8C,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,cAAc,QAAQ,CAAC,MAAM,GAAG,EACnD,QAAQ,CAAC,MAAM,IAAI,GAAG;YACpB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,+DAA+D,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,CAChB,GAAG,IAAI,gEAAgE,EACvE,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,iFAAiF;AACjF,MAAM,eAAe,GAA2B;IAC9C,eAAe,EACb,mFAAmF;IACrF,eAAe,EACb,4EAA4E;IAC9E,YAAY,EACV,yFAAyF;IAC3F,cAAc,EACZ,+KAA+K;IACjL,gBAAgB,EACd,4LAA4L;IAC9L,4BAA4B,EAC1B,6MAA6M;IAC/M,cAAc,EAAE,6DAA6D;IAC7E,WAAW,EACT,kFAAkF;IACpF,WAAW,EACT,sGAAsG;IACxG,WAAW,EACT,uIAAuI;IACzI,mBAAmB,EACjB,iEAAiE;IACnE,mBAAmB,EACjB,+EAA+E;IACjF,YAAY,EACV,wGAAwG;IAC1G,aAAa,EACX,4GAA4G;IAC9G,WAAW,EACT,+FAA+F;IACjG,eAAe,EACb,oGAAoG;IACtG,2BAA2B,EACzB,+HAA+H;CAClI,CAAC;AAEF,KAAK,UAAU,gBAAgB,CAC7B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;eAAO,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import {\n  type AudienceCreateRequest,\n  type AudienceListResponse,\n  AudienceListResponseSchema,\n  type AudienceResponse,\n  AudienceResponseSchema,\n  type AudienceUpdateRequest,\n  type MemberAudience,\n  MemberAudienceSchema,\n  type MemberAudienceSetResult,\n  MemberAudienceSetResultSchema,\n  type TeamAudience,\n  TeamAudienceSchema,\n  type TeamAudienceSetResult,\n  TeamAudienceSetResultSchema,\n  type ProductScopeList,\n  ProductScopeListSchema,\n  type ProductScopeProductChange,\n  ProductScopeProductChangeSchema,\n  type TeamScopes,\n  TeamScopesSchema,\n  type TeamScopesSetResult,\n  TeamScopesSetResultSchema,\n  type TeamAppSetResult,\n  TeamAppSetResultSchema,\n  type TeamCreateRequest,\n  type TeamCreateResult,\n  TeamCreateResultSchema,\n  type TeamDisconnectResult,\n  TeamDisconnectResultSchema,\n  type TeamMemberChangeResult,\n  TeamMemberChangeResultSchema,\n  type TeamMemberAddResult,\n  TeamMemberAddResultSchema,\n  type TeamMemberInviteResult,\n  TeamMemberInviteResultSchema,\n  type TeamMemberList,\n  TeamMemberListSchema,\n  type TeamRenameResult,\n  TeamRenameResultSchema,\n  type TeamRoles,\n  TeamRolesSchema,\n  type TeamIntegrationStatus,\n  TeamIntegrationStatusSchema,\n  type TeamIntegrationEventList,\n  TeamIntegrationEventListSchema,\n  type TeamList,\n  TeamListSchema,\n  type TeamWebhookMintResult,\n  TeamWebhookMintResultSchema,\n} from '@ekanos/integration-schema';\nimport type { z } from 'zod';\n\nimport { request } from './auth/ekanos-api';\nimport {\n  authRequiredError,\n  forbiddenError,\n  invalidStateError,\n  networkError,\n  notFoundError,\n  usageError,\n  validationError,\n} from './errors';\n\n/**\n * The CLI's client for a Source's teams and their integration setup — the\n * team-level counterpart of `apps-api.ts`.\n *\n *   GET  /api/partner/teams?source=<slug>                              → TeamList\n *   GET  /api/partner/teams/<team>/integrations/<product>?source=<slug> → TeamIntegrationStatus\n *   PUT  …/integrations/<product>/app?source=<slug>  { connectionId?, fields }\n *                                                                      → TeamAppSetResult\n *   POST …/integrations/<product>/webhooks/<id>?source=<slug>         → TeamWebhookMintResult\n *   DELETE /api/partner/teams/<team>/integrations/<product>?source=<slug> → TeamDisconnectResult\n *   POST /api/partner/teams?source=<slug>  { name, slug?, ownerEmail? } → TeamCreateResult\n *   PATCH /api/partner/teams/<team>?source=<slug>  { name }           → TeamRenameResult\n *   GET  /api/partner/teams/<team>/members?source=<slug>               → TeamMemberList\n *   POST …/<team>/members?source=<slug>  { email, role }               → TeamMemberInviteResult\n *   PATCH  …/<team>/members/<email>?source=<slug>  { role }            → TeamMemberChangeResult\n *   DELETE …/<team>/members/<email>?source=<slug>                      → TeamMemberChangeResult\n *   GET  /api/partner/teams/<team>/roles?source=<slug>                 → TeamRoles\n *   GET  /api/partner/teams/<team>/events?source=<slug>[&product=<slug>]\n *        [&since=<iso>][&limit=<n>]                                    → TeamIntegrationEventList\n *   GET  /api/partner/scopes?source=<slug>                             → ProductScopeList\n *   PUT | DELETE /api/partner/scopes/<scope>/products/<product>?source=<slug>\n *                                                                      → ProductScopeProductChange\n *   GET  /api/partner/audiences?source=<slug>                          → AudienceListResponse\n *   GET | PATCH /api/partner/audiences/<audience>?source=<slug>        → AudienceResponse\n *   POST /api/partner/audiences?source=<slug>  { name, … }             → AudienceResponse\n *   GET | PUT /api/partner/teams/<team>/audience?source=<slug>  { audienceId }\n *                                                                      → TeamAudience | TeamAudienceSetResult\n *   GET | PUT …/<team>/members/<email>/audience?source=<slug>  { audienceId | null }\n *                                                                      → MemberAudience | MemberAudienceSetResult\n *   GET  /api/partner/teams/<team>/scopes?source=<slug>                → TeamScopes\n *   PUT  /api/partner/teams/<team>/scopes?source=<slug>  { scopes }   → TeamScopesSetResult\n *\n *   → 401 / 3xx  refresh once and retry\n *   → 403 { code: \"SOURCE_ADMIN_REQUIRED\" | \"MFA_REQUIRED\" | \"FORBIDDEN\" }\n *   → 404 { code: \"TEAM_NOT_FOUND\" | \"PRODUCT_NOT_ENTITLED\" | \"WEBHOOK_NOT_FOUND\"\n *               | \"CONNECTION_NOT_FOUND\" | \"SOURCE_NOT_FOUND\" }\n *               | \"MEMBER_NOT_FOUND\" }\n *   → 409 { code: \"NO_TEAM_APP\" | \"SLUG_TAKEN\" | \"TEAM_ACCOUNTS_DISABLED\"\n *               | \"ALREADY_MEMBER\" | \"ALREADY_INVITED\" | \"PRIMARY_OWNER\" }\n *   → 400 { code: \"INVALID_FIELDS\" | \"INVALID_REQUEST\" | \"UNKNOWN_ROLE\" }\n */\n\nexport type TeamsApiResult<T> =\n  | { status: 'ok'; data: T }\n  | { status: 'unauthorized' };\n\nexport function listTeams(\n  host: string,\n  accessToken: string,\n  source: string,\n): Promise<TeamsApiResult<TeamList>> {\n  return call(host, accessToken, TeamListSchema, {\n    method: 'GET',\n    path: '/api/partner/teams',\n    source,\n  });\n}\n\nexport function showTeamIntegration(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; product: string },\n): Promise<TeamsApiResult<TeamIntegrationStatus>> {\n  return call(host, accessToken, TeamIntegrationStatusSchema, {\n    method: 'GET',\n    path: integrationPath(target),\n    source: target.source,\n  });\n}\n\nexport function setTeamApp(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; product: string },\n  body: {\n    connectionId?: string;\n    fields: Record<string, string>;\n    clear?: string[];\n  },\n): Promise<TeamsApiResult<TeamAppSetResult>> {\n  return call(host, accessToken, TeamAppSetResultSchema, {\n    method: 'PUT',\n    path: `${integrationPath(target)}/app`,\n    source: target.source,\n    body,\n  });\n}\n\nexport function mintTeamWebhook(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; product: string },\n  webhookId: string,\n): Promise<TeamsApiResult<TeamWebhookMintResult>> {\n  return call(host, accessToken, TeamWebhookMintResultSchema, {\n    method: 'POST',\n    path: `${integrationPath(target)}/webhooks/${encodeURIComponent(webhookId)}`,\n    source: target.source,\n  });\n}\n\nexport function disconnectTeamIntegration(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; product: string; mine?: boolean },\n): Promise<TeamsApiResult<TeamDisconnectResult>> {\n  return call(host, accessToken, TeamDisconnectResultSchema, {\n    method: 'DELETE',\n    // `--mine`: the caller's own personal connection, never another's.\n    path: `${integrationPath(target)}${target.mine ? '/mine' : ''}`,\n    source: target.source,\n  });\n}\n\nexport function createTeam(\n  host: string,\n  accessToken: string,\n  source: string,\n  body: TeamCreateRequest,\n): Promise<TeamsApiResult<TeamCreateResult>> {\n  return call(host, accessToken, TeamCreateResultSchema, {\n    method: 'POST',\n    path: '/api/partner/teams',\n    source,\n    body,\n  });\n}\n\nexport function renameTeam(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  name: string,\n): Promise<TeamsApiResult<TeamRenameResult>> {\n  return call(host, accessToken, TeamRenameResultSchema, {\n    method: 'PATCH',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}`,\n    source: target.source,\n    body: { name },\n  });\n}\n\nexport function listTeamMembers(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n): Promise<TeamsApiResult<TeamMemberList>> {\n  return call(host, accessToken, TeamMemberListSchema, {\n    method: 'GET',\n    path: membersPath(target.team),\n    source: target.source,\n  });\n}\n\nexport function inviteTeamMember(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  body: { email: string; role: string },\n): Promise<TeamsApiResult<TeamMemberInviteResult>> {\n  return call(host, accessToken, TeamMemberInviteResultSchema, {\n    method: 'POST',\n    path: membersPath(target.team),\n    source: target.source,\n    body,\n  });\n}\n\n/** `teams members add`: a member now, no invitation email (`PUT`). */\nexport function addTeamMember(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  body: { self: true; role?: string } | { email: string; role?: string },\n): Promise<TeamsApiResult<TeamMemberAddResult>> {\n  return call(host, accessToken, TeamMemberAddResultSchema, {\n    method: 'PUT',\n    path: membersPath(target.team),\n    source: target.source,\n    body,\n  });\n}\n\nexport function setTeamMemberRole(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; email: string },\n  role: string,\n): Promise<TeamsApiResult<TeamMemberChangeResult>> {\n  return call(host, accessToken, TeamMemberChangeResultSchema, {\n    method: 'PATCH',\n    path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}`,\n    source: target.source,\n    body: { role },\n  });\n}\n\nexport function removeTeamMember(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; email: string },\n): Promise<TeamsApiResult<TeamMemberChangeResult>> {\n  return call(host, accessToken, TeamMemberChangeResultSchema, {\n    method: 'DELETE',\n    path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}`,\n    source: target.source,\n  });\n}\n\nexport function listProductScopes(\n  host: string,\n  accessToken: string,\n  source: string,\n): Promise<TeamsApiResult<ProductScopeList>> {\n  return call(host, accessToken, ProductScopeListSchema, {\n    method: 'GET',\n    path: '/api/partner/scopes',\n    source,\n  });\n}\n\nexport function setScopeProduct(\n  host: string,\n  accessToken: string,\n  target: { source: string; scope: string; product: string },\n  included: boolean,\n): Promise<TeamsApiResult<ProductScopeProductChange>> {\n  return call(host, accessToken, ProductScopeProductChangeSchema, {\n    method: included ? 'PUT' : 'DELETE',\n    path: `/api/partner/scopes/${encodeURIComponent(target.scope)}/products/${encodeURIComponent(target.product)}`,\n    source: target.source,\n  });\n}\n\nexport function showTeamScopes(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n): Promise<TeamsApiResult<TeamScopes>> {\n  return call(host, accessToken, TeamScopesSchema, {\n    method: 'GET',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/scopes`,\n    source: target.source,\n  });\n}\n\nexport function setTeamScopes(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  scopes: string[],\n): Promise<TeamsApiResult<TeamScopesSetResult>> {\n  return call(host, accessToken, TeamScopesSetResultSchema, {\n    method: 'PUT',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/scopes`,\n    source: target.source,\n    body: { scopes },\n  });\n}\n\nexport function listAudiences(\n  host: string,\n  accessToken: string,\n  source: string,\n): Promise<TeamsApiResult<AudienceListResponse>> {\n  return call(host, accessToken, AudienceListResponseSchema, {\n    method: 'GET',\n    path: '/api/partner/audiences',\n    source,\n  });\n}\n\nexport function showAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; audience: string },\n): Promise<TeamsApiResult<AudienceResponse>> {\n  return call(host, accessToken, AudienceResponseSchema, {\n    method: 'GET',\n    path: `/api/partner/audiences/${encodeURIComponent(target.audience)}`,\n    source: target.source,\n  });\n}\n\nexport function createAudience(\n  host: string,\n  accessToken: string,\n  source: string,\n  body: AudienceCreateRequest,\n): Promise<TeamsApiResult<AudienceResponse>> {\n  return call(host, accessToken, AudienceResponseSchema, {\n    method: 'POST',\n    path: '/api/partner/audiences',\n    source,\n    body,\n  });\n}\n\nexport function updateAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; audience: string },\n  body: AudienceUpdateRequest,\n): Promise<TeamsApiResult<AudienceResponse>> {\n  return call(host, accessToken, AudienceResponseSchema, {\n    method: 'PATCH',\n    path: `/api/partner/audiences/${encodeURIComponent(target.audience)}`,\n    source: target.source,\n    body,\n  });\n}\n\nexport function showTeamAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n): Promise<TeamsApiResult<TeamAudience>> {\n  return call(host, accessToken, TeamAudienceSchema, {\n    method: 'GET',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/audience`,\n    source: target.source,\n  });\n}\n\nexport function setTeamAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  audienceId: string,\n): Promise<TeamsApiResult<TeamAudienceSetResult>> {\n  return call(host, accessToken, TeamAudienceSetResultSchema, {\n    method: 'PUT',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/audience`,\n    source: target.source,\n    body: { audienceId },\n  });\n}\n\nexport function showMemberAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; email: string },\n): Promise<TeamsApiResult<MemberAudience>> {\n  return call(host, accessToken, MemberAudienceSchema, {\n    method: 'GET',\n    path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}/audience`,\n    source: target.source,\n  });\n}\n\n/** `audienceId: null` clears the member's own audience. */\nexport function setMemberAudience(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string; email: string },\n  audienceId: string | null,\n): Promise<TeamsApiResult<MemberAudienceSetResult>> {\n  return call(host, accessToken, MemberAudienceSetResultSchema, {\n    method: 'PUT',\n    path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}/audience`,\n    source: target.source,\n    body: { audienceId },\n  });\n}\n\nexport function listTeamRoles(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n): Promise<TeamsApiResult<TeamRoles>> {\n  return call(host, accessToken, TeamRolesSchema, {\n    method: 'GET',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/roles`,\n    source: target.source,\n  });\n}\n\nexport function listTeamEvents(\n  host: string,\n  accessToken: string,\n  target: { source: string; team: string },\n  filters: { product?: string; since?: string; limit?: number },\n): Promise<TeamsApiResult<TeamIntegrationEventList>> {\n  const query = new URLSearchParams();\n  if (filters.product) query.set('product', filters.product);\n  if (filters.since) query.set('since', filters.since);\n  if (filters.limit !== undefined) query.set('limit', String(filters.limit));\n  const encoded = query.toString();\n  const suffix = encoded ? `?${encoded}` : '';\n  return call(host, accessToken, TeamIntegrationEventListSchema, {\n    method: 'GET',\n    path: `/api/partner/teams/${encodeURIComponent(target.team)}/events${suffix}`,\n    source: target.source,\n  });\n}\n\nfunction membersPath(team: string): string {\n  return `/api/partner/teams/${encodeURIComponent(team)}/members`;\n}\n\nfunction integrationPath(target: { team: string; product: string }): string {\n  return `/api/partner/teams/${encodeURIComponent(target.team)}/integrations/${encodeURIComponent(target.product)}`;\n}\n\n/** One partner teams call; shared by the team-agent clients (`team-agents-api.ts`). */\nexport async function call<T>(\n  host: string,\n  accessToken: string,\n  schema: z.ZodType<T>,\n  init: {\n    method: 'GET' | 'PUT' | 'POST' | 'PATCH' | 'DELETE';\n    path: string;\n    source: string;\n    body?: unknown;\n  },\n): Promise<TeamsApiResult<T>> {\n  const response = await request(\n    `${host}${init.path}${init.path.includes('?') ? '&' : '?'}${new URLSearchParams({ source: init.source })}`,\n    {\n      method: init.method,\n      headers: {\n        accept: 'application/json',\n        authorization: `Bearer ${accessToken}`,\n        ...(init.body === undefined\n          ? {}\n          : { 'content-type': 'application/json' }),\n      },\n      body: init.body === undefined ? undefined : JSON.stringify(init.body),\n    },\n  );\n\n  if (\n    response.status === 401 ||\n    (response.status >= 300 && response.status < 400)\n  ) {\n    return { status: 'unauthorized' };\n  }\n\n  const body = await readOptionalJson(response);\n  const code = typeof body.code === 'string' ? body.code : null;\n  const message =\n    typeof body.error === 'string' && body.error ? body.error : null;\n\n  if (response.status === 403 && code === 'MFA_REQUIRED') {\n    throw authRequiredError(\n      message ?? `${host} requires multi-factor authentication.`,\n      'Complete MFA in the browser, then run \"ekanos login\" again.',\n    );\n  }\n  if (response.status === 403) {\n    throw forbiddenError(\n      message ?? 'Not permitted on this Source.',\n      code === 'SOURCE_ADMIN_REQUIRED'\n        ? \"Only a Source admin manages its teams' integrations. Ask one to run it.\"\n        : code === 'CONFIRM_NOT_PERMITTED'\n          ? \"Only a Source admin of the team's Source, or someone who manages the team's agents, confirms what an agent may use.\"\n          : code === 'PERSONAL_AGENT_CREATOR_ONLY'\n            ? 'A personal agent acts with its creator\\'s own connections, so only they change it, run it, decide its approvals or cancel its runs. \"ekanos teams agents list <team>\" shows whose each agent is.'\n            : code === 'NOT_A_TEAM_MEMBER'\n              ? 'Add yourself to the team first (\"ekanos teams members add <team> --self\"), then run this again.'\n              : code === 'AGENTS_MANAGE_REQUIRED'\n                ? 'Take a role on the team that holds agents.manage (\"ekanos teams roles list <team>\"), or make it your own agent with --personal.'\n                : code === 'PERSONAL_AGENT_CHANNEL_TRIGGER'\n                  ? 'Add a schedule or a webhook trigger instead: \"ekanos teams triggers add <team> <key> schedule|webhook --prompt ...\".'\n                  : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 404) {\n    throw notFoundError(\n      message ?? 'Not found.',\n      (code ? LIFECYCLE_HINTS[code] : undefined) ??\n        (code === 'TEAM_NOT_FOUND'\n          ? 'Run \"ekanos teams list\" to see the teams on this Source.'\n          : code === 'PRODUCT_NOT_ENTITLED'\n            ? '\"ekanos sources products\" shows what this Source has; only Ekanos enables a product for a Source.'\n            : code === 'SCOPE_NOT_FOUND' || code === 'PRODUCT_NOT_IN_SCOPE'\n              ? 'Run \"ekanos sources scopes\" to see the Source\\'s product scopes and their products.'\n              : code === 'WEBHOOK_NOT_FOUND' || code === 'CONNECTION_NOT_FOUND'\n                ? 'Run \"ekanos teams show <team> <product>\" to see its team apps and webhooks.'\n                : code === 'MEMBER_NOT_FOUND'\n                  ? 'Run \"ekanos teams members list <team>\" to see its members and invitations.'\n                  : code === 'NOT_A_SOURCE_USER'\n                    ? 'Invite them instead, by email: \"ekanos teams members invite <team> <email> --role <role>\".'\n                    : code === 'SKILL_NOT_FOUND'\n                      ? 'Run \"ekanos skills list --team <team>\" (and \"ekanos skills list\") to see the skills this team can use.'\n                      : code?.startsWith('AGENT_') ||\n                          code === 'TEMPLATE_NOT_FOUND'\n                        ? 'Run \"ekanos teams agents list <team>\" to see the team\\'s agents.'\n                        : /^(TRIGGER|LINK|MCP)_/.test(code ?? '')\n                          ? 'List them first: \"ekanos teams triggers|links|mcp list <team> ...\"'\n                          : 'Run \"ekanos sources\" to list the sources you hold a seat on.'),\n    );\n  }\n  if (response.status === 409 && code === 'NO_TEAM_APP') {\n    throw invalidStateError(\n      message ?? 'This integration takes no team app.',\n      'Teams connect through the Source\\'s app: \"ekanos apps show <product>\".',\n    );\n  }\n  if (response.status === 409 || response.status === 422) {\n    throw invalidStateError(\n      message ?? 'The host refused the change.',\n      (code ? LIFECYCLE_HINTS[code] : undefined) ??\n        (code === 'AUDIENCE_SET_ON_TEAM'\n          ? 'Set the team’s instead: \"ekanos teams audience <team> <audience>\". A person’s groups narrow it.'\n          : code === 'SLUG_TAKEN'\n            ? 'Pick another with --slug, or run \"ekanos teams list\" to see the teams.'\n            : code === 'AGENT_VERSION_CHANGED'\n              ? 'A newer version was published since it was shown to you. Review it with \"ekanos teams agents show <team> <key>\", then run \"ekanos teams agents confirm\" again.'\n              : code === 'ROLE_NEEDS_ACCEPTANCE'\n                ? 'Add them with a lower role (--role admin), or invite them to the top role so they accept it: \"ekanos teams members invite <team> <email> --role owner\".'\n                : code === 'AGENT_VERSION_CONFLICT'\n                  ? `Review it with \"ekanos teams agents show <team> <key>\", then apply with --base-version ${typeof body.latestVersion === 'number' ? body.latestVersion : '<its version>'} (or --overwrite to replace it anyway).`\n                  : code === 'ALREADY_MEMBER' || code === 'ALREADY_INVITED'\n                    ? 'Run \"ekanos teams members list <team>\"; change a role with \"ekanos teams members role <team> <email> <role>\".'\n                    : code === 'PRIMARY_OWNER'\n                      ? \"The primary owner's ownership is transferred in the app (team Settings → Members).\"\n                      : code === 'TEAM_ACCOUNTS_DISABLED'\n                        ? 'Ekanos switches team accounts on for a Source; ask Ekanos.'\n                        : code === 'PERSONAL_CONNECTION'\n                          ? 'Each member disconnects their own: \"ekanos teams disconnect <team> <product> --mine\".'\n                          : code === 'MCP_SERVER_FROM_TEMPLATE'\n                            ? 'It stays while the agent template declares it: change the template, apply and publish.'\n                            : code === 'PRODUCT_NOT_ENTITLED'\n                              ? '\"ekanos sources products\" shows what this Source has; only those can be in its scopes.'\n                              : code === 'TEMPLATE_ARCHIVED'\n                                ? 'Unarchive it first: \"ekanos agents unarchive <key>\".'\n                                : 'See \"ekanos teams --help\".'),\n    );\n  }\n  if (response.status === 400 && code === 'INVALID_AGENT') {\n    const issues = Array.isArray(body.issues)\n      ? body.issues.flatMap((issue: unknown) =>\n          typeof issue === 'object' &&\n          issue !== null &&\n          typeof (issue as { message?: unknown }).message === 'string'\n            ? [\n                `  ${String((issue as { path?: unknown }).path ?? '(root)')}: ${(issue as { message: string }).message}`,\n              ]\n            : [],\n        )\n      : [];\n    throw validationError(\n      [message ?? 'The agent is not valid.', ...issues].join('\\n'),\n      'Fix agent.json and run it again.',\n    );\n  }\n  if (response.status === 400 && code === 'UNKNOWN_ROLE') {\n    throw validationError(\n      message ?? 'No such role.',\n      'Run \"ekanos teams roles list <team>\" for the roles this Source uses.',\n    );\n  }\n  if (response.status === 400 && code === 'INVALID_FIELDS') {\n    throw validationError(\n      message ?? 'The host refused the fields.',\n      'Run \"ekanos teams app set <team> <product>\" again.',\n    );\n  }\n  if (response.status === 400 && code === 'SECRET_AS_ARGUMENT') {\n    throw usageError(\n      message ?? 'A secret was passed as an argument.',\n      'Leave that field out of --set: pass it with --set-secret <field>=env:<NAME>|file:<path>|stdin or --browser, or run the command at your terminal, which asks for it hidden.',\n    );\n  }\n  if (response.status === 400) {\n    throw usageError(\n      message ?? 'The host refused the request.',\n      'See \"ekanos teams --help\".',\n    );\n  }\n  if (response.status >= 500 && code && message) {\n    throw networkError(message, 'The host could not finish it; retry shortly.');\n  }\n  if (!response.ok) {\n    throw networkError(\n      `${host}${init.path} responded ${response.status}.`,\n      response.status >= 500\n        ? 'The Ekanos deployment returned a server error. Retry shortly.'\n        : 'Confirm the host runs a build that includes the teams routes.',\n    );\n  }\n\n  const parsed = schema.safeParse(body.data);\n  if (!parsed.success) {\n    throw networkError(\n      `${host}/api/partner/teams answered in a shape this CLI does not read.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the teams contract.',\n    );\n  }\n  return { status: 'ok', data: parsed.data };\n}\n\n/** Next steps for the refusals of the team lifecycle, roles and groups calls. */\nconst LIFECYCLE_HINTS: Record<string, string> = {\n  GROUP_NOT_FOUND:\n    'Run \"ekanos teams groups list <team>\" to see its groups (name one by name or id).',\n  GROUP_AMBIGUOUS:\n    'Run \"ekanos teams groups list <team> --json\" and name the group by its id.',\n  GROUP_EXISTS:\n    'Pick another name, or change that group: \"ekanos teams groups update <team> <group> …\".',\n  GROUP_IMPLICIT:\n    'Everyone holds each member in no other group, so it is not edited and has no members to add or remove: add them to another group instead (\"ekanos teams groups list <team>\").',\n  GROUP_PREDEFINED:\n    'A predefined group belongs to the team’s business type and is removed with the Source’s audiences, not from one team. Change its products or members here, or delete a team group instead.',\n  PRODUCT_NOT_IN_BUSINESS_TYPE:\n    'A group picks only within the team’s audience: \"ekanos teams audience <team>\" names it, \"ekanos audiences show <audience>\" lists its products, and \"ekanos audiences set <audience> --products …\" adds one.',\n  ROLE_NOT_FOUND: 'Run \"ekanos sources roles list\" to see the Source\\'s roles.',\n  ROLE_EXISTS:\n    'Change it instead: \"ekanos sources roles update <role> …\", or pick another name.',\n  SYSTEM_ROLE:\n    'Owner, admin and member are fixed; create a custom role with \"ekanos sources roles create <name> …\".',\n  ROLE_IN_USE:\n    'Give its members another role first: \"ekanos teams members role <team> <email> <role>\"; \"ekanos sources people\" shows who holds what.',\n  WORKSPACE_NOT_FOUND:\n    'Run \"ekanos teams workspace list <team>\" to see its workspaces.',\n  WORKSPACES_DISABLED:\n    'Workspaces are a Source Flag (enable_workspaces) only a super-admin switches.',\n  NOT_A_MEMBER:\n    'Run \"ekanos teams members list <team>\" to see who is on it; you leave only a team you are a member of.',\n  NOT_CONNECTED:\n    'Connect it first: \"ekanos teams connect <team> <product>\"; \"ekanos teams health <team>\" lists what it has.',\n  USER_SCOPED:\n    'Each person connects it for themselves and checks it on their own Integrations → Health page.',\n  NO_HEALTH_CHECK:\n    'The product has no package on this deployment; \"ekanos sources products\" shows what is registered.',\n  PRODUCT_NOT_VISIBLE_TO_TEAM:\n    'Run \"ekanos teams audience <team>\" for the team’s audience, and \"ekanos audiences show <audience>\" for the products it shows.',\n};\n\nasync function readOptionalJson(\n  response: Response,\n): Promise<Record<string, unknown>> {\n  try {\n    const parsed: unknown = await response.json();\n    return typeof parsed === 'object' && parsed !== null\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n"]}

package/dist/workflows-api.js

@@ -128,7 +128,7 @@ async function call(host, accessToken, schema, init) {
     }
     if (response.status === 409 || response.status === 502) {
         throw invalidStateError(message !== null && message !== void 0 ? message : 'The host refused the request in its current state.', code === 'WORKFLOWS_EXPERIENCE_OFF'
-            ? 'Ask Ekanos to turn on Workflows for this Source: only a super-admin can ("ekanos sources products" shows it as off).'
+            ? 'Ask Ekanos to turn on Workflows for this Source: only Ekanos can ("ekanos sources products" shows it as off).'
             : code === 'AMBIGUOUS_WORKFLOW'
                 ? 'Name it by id: "ekanos workflows list --team <slug>" shows each one\'s.'
                 : code === 'WORKFLOW_ARCHIVED'

package/dist/workflows-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflows-api.js","sourceRoot":"","sources":["../src/workflows-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,yBAAyB,EAIzB,iCAAiC,EAEjC,8BAA8B,EAE9B,wBAAwB,EAExB,sBAAsB,EAEtB,8BAA8B,EAE9B,2BAA2B,EAE3B,yBAAyB,EAGzB,4BAA4B,EAE5B,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAuClB,MAAM,OAAO,GAAG,kBAAkB,CAAC;AAEnC,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAqC;IAErC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,KAAK,kBAAI,MAAM,EAAE,MAAM,CAAC,MAAM,IAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE;KACtE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,WAAmB,EACnB,MAAyC;IAEzC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE;QACvD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACnD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAkB,EAClB,IAA8B;IAE9B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACxD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAyC,EACzC,IAA+B;IAE/B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,+BAA+B,EAAE;QAC9D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS;QAC1D,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAAyC,EACzC,IAAiC;IAEjC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;QACxD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAA2D;IAE3D,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACxD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO;QAC5B,KAAK,gCACH,MAAM,EAAE,MAAM,CAAC,MAAM,IAClB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACtD,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpD;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAAsC;IAEtC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;QAC1D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACrD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAsC;IAEtC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,8BAA8B,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS;QAC5D,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,WAAmB,EACnB,MAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,8BAA8B,EAAE;QAC7D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,WAAmB,EACnB,MAA2C,EAC3C,IAAuC;IAEvC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,iCAAiC,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;QAC/D,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,MAAkB;IAC9B,OAAO,sBAAsB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,IAAY,EACZ,WAAmB,EACnB,MAAoB,EACpB,IAKC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACxD;QACE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,kBACL,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,UAAU,WAAW,EAAE,IACnC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC5C;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CACF,CAAC;IAEF,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,IAAI,wCAAwC,EAC1D,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,CAClB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,uBAAuB;YAC9B,CAAC,CAAC,mDAAmD;YACrD,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,CACjB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,YAAY,EACvB,IAAI,KAAK,gBAAgB;YACvB,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,IAAI,KAAK,oBAAoB;gBAC7B,CAAC,CAAC,sHAAsH;gBACxH,CAAC,CAAC,IAAI,KAAK,eAAe;oBACxB,CAAC,CAAC,sEAAsE;oBACxE,CAAC,CAAC,IAAI,KAAK,oBAAoB;wBAC7B,CAAC,CAAC,0EAA0E;wBAC5E,CAAC,CAAC,8DAA8D,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,yCAAyC;YAC3D,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,eAAe,CACnB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,2CAA2C,EACtD,IAAI,KAAK,oBAAoB;YAC3B,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,uGAAuG,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,oDAAoD,EAC/D,IAAI,KAAK,0BAA0B;YACjC,CAAC,CAAC,sHAAsH;YACxH,CAAC,CAAC,IAAI,KAAK,oBAAoB;gBAC7B,CAAC,CAAC,yEAAyE;gBAC3E,CAAC,CAAC,IAAI,KAAK,mBAAmB;oBAC5B,CAAC,CAAC,+EAA+E;oBACjF,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,kBAAkB;wBACzD,CAAC,CAAC,gFAAgF;wBAClF,CAAC,CAAC,IAAI,KAAK,cAAc;4BACvB,CAAC,CAAC,0FAA0F;4BAC5F,CAAC,CAAC,IAAI,KAAK,eAAe;gCACxB,CAAC,CAAC,8FAA8F;gCAChG,CAAC,CAAC,IAAI,KAAK,eAAe;oCACxB,CAAC,CAAC,uGAAuG;oCACzG,CAAC,CAAC,IAAI,KAAK,aAAa;wCACtB,CAAC,CAAC,iGAAiG;wCACnG,CAAC,CAAC,mFAAmF,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,cAAc,QAAQ,CAAC,MAAM,GAAG,EACnD,QAAQ,CAAC,MAAM,IAAI,GAAG;YACpB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,mEAAmE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,8CAA8C,EACjE,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,OAAO,CACL,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC;QACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAChC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;eAAO,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import {\n  type TeamWorkflowApplied,\n  TeamWorkflowAppliedSchema,\n  type TeamWorkflowApplyRequest,\n  type TeamWorkflowApprovalDecideRequest,\n  type TeamWorkflowApprovalDecided,\n  TeamWorkflowApprovalDecidedSchema,\n  type TeamWorkflowApprovalList,\n  TeamWorkflowApprovalListSchema,\n  type TeamWorkflowDetail,\n  TeamWorkflowDetailSchema,\n  type TeamWorkflowList,\n  TeamWorkflowListSchema,\n  type TeamWorkflowRunCancelled,\n  TeamWorkflowRunCancelledSchema,\n  type TeamWorkflowRunDetail,\n  TeamWorkflowRunDetailSchema,\n  type TeamWorkflowRunList,\n  TeamWorkflowRunListSchema,\n  type TeamWorkflowRunStartRequest,\n  type TeamWorkflowRunStarted,\n  TeamWorkflowRunStartedSchema,\n  type TeamWorkflowStatusChanged,\n  TeamWorkflowStatusChangedSchema,\n  type TeamWorkflowStatusRequest,\n} from '@ekanos/integration-schema';\nimport type { z } from 'zod';\n\nimport { request } from './auth/ekanos-api';\nimport {\n  authRequiredError,\n  forbiddenError,\n  invalidStateError,\n  networkError,\n  notFoundError,\n  usageError,\n  validationError,\n} from './errors';\n\n/**\n * The CLI's client for a team's workflows — `ekanos workflows`.\n *\n *   GET  /api/partner/teams/<team>/workflows                       → TeamWorkflowList\n *   POST /api/partner/teams/<team>/workflows                       → TeamWorkflowApplied\n *   GET  /api/partner/teams/<team>/workflows/<id>                  → TeamWorkflowDetail\n *   POST /api/partner/teams/<team>/workflows/<id>/status           → TeamWorkflowStatusChanged\n *   POST /api/partner/teams/<team>/workflows/<id>/runs             → TeamWorkflowRunStarted\n *   GET  /api/partner/teams/<team>/workflows/runs                  → TeamWorkflowRunList\n *   GET  /api/partner/teams/<team>/workflows/runs/<id>             → TeamWorkflowRunDetail\n *   POST /api/partner/teams/<team>/workflows/runs/<id>/cancel      → TeamWorkflowRunCancelled\n *   GET  /api/partner/teams/<team>/workflows/approvals             → TeamWorkflowApprovalList\n *   POST /api/partner/teams/<team>/workflows/approvals/<id>        → TeamWorkflowApprovalDecided\n *\n * Every path carries `?source=<slug>`.\n */\n\nexport type WorkflowsApiResult<T> =\n  | { status: 'ok'; data: T }\n  | { status: 'unauthorized' }\n  /** Activation stopped only on what Custom Code reaches: ask, then resend. */\n  | { status: 'needs-access'; error: string; codeAccess: CodeAccess[] };\n\nexport interface CodeAccess {\n  stepId: string;\n  effect: 'read' | 'write';\n  egressHosts: string[];\n  tools: string[];\n  dependencies: string[];\n  reviewSummary: string | null;\n}\n\ninterface TeamTarget {\n  source: string;\n  team: string;\n}\n\nconst segment = encodeURIComponent;\n\nexport function listWorkflows(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { all: boolean },\n): Promise<WorkflowsApiResult<TeamWorkflowList>> {\n  return call(host, accessToken, TeamWorkflowListSchema, {\n    method: 'GET',\n    path: base(target),\n    query: { source: target.source, ...(target.all ? { all: '1' } : {}) },\n  });\n}\n\nexport function showWorkflow(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { workflow: string },\n): Promise<WorkflowsApiResult<TeamWorkflowDetail>> {\n  return call(host, accessToken, TeamWorkflowDetailSchema, {\n    method: 'GET',\n    path: `${base(target)}/${segment(target.workflow)}`,\n    query: { source: target.source },\n  });\n}\n\nexport function applyWorkflow(\n  host: string,\n  accessToken: string,\n  target: TeamTarget,\n  body: TeamWorkflowApplyRequest,\n): Promise<WorkflowsApiResult<TeamWorkflowApplied>> {\n  return call(host, accessToken, TeamWorkflowAppliedSchema, {\n    method: 'POST',\n    path: base(target),\n    query: { source: target.source },\n    body,\n  });\n}\n\nexport function setWorkflowStatus(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { workflow: string },\n  body: TeamWorkflowStatusRequest,\n): Promise<WorkflowsApiResult<TeamWorkflowStatusChanged>> {\n  return call(host, accessToken, TeamWorkflowStatusChangedSchema, {\n    method: 'POST',\n    path: `${base(target)}/${segment(target.workflow)}/status`,\n    query: { source: target.source },\n    body,\n  });\n}\n\nexport function startWorkflowRun(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { workflow: string },\n  body: TeamWorkflowRunStartRequest,\n): Promise<WorkflowsApiResult<TeamWorkflowRunStarted>> {\n  return call(host, accessToken, TeamWorkflowRunStartedSchema, {\n    method: 'POST',\n    path: `${base(target)}/${segment(target.workflow)}/runs`,\n    query: { source: target.source },\n    body,\n  });\n}\n\nexport function listWorkflowRuns(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { workflow?: string; status?: string },\n): Promise<WorkflowsApiResult<TeamWorkflowRunList>> {\n  return call(host, accessToken, TeamWorkflowRunListSchema, {\n    method: 'GET',\n    path: `${base(target)}/runs`,\n    query: {\n      source: target.source,\n      ...(target.workflow ? { workflow: target.workflow } : {}),\n      ...(target.status ? { status: target.status } : {}),\n    },\n  });\n}\n\nexport function showWorkflowRun(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { runId: string },\n): Promise<WorkflowsApiResult<TeamWorkflowRunDetail>> {\n  return call(host, accessToken, TeamWorkflowRunDetailSchema, {\n    method: 'GET',\n    path: `${base(target)}/runs/${segment(target.runId)}`,\n    query: { source: target.source },\n  });\n}\n\nexport function cancelWorkflowRun(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { runId: string },\n): Promise<WorkflowsApiResult<TeamWorkflowRunCancelled>> {\n  return call(host, accessToken, TeamWorkflowRunCancelledSchema, {\n    method: 'POST',\n    path: `${base(target)}/runs/${segment(target.runId)}/cancel`,\n    query: { source: target.source },\n  });\n}\n\nexport function listWorkflowApprovals(\n  host: string,\n  accessToken: string,\n  target: TeamTarget,\n): Promise<WorkflowsApiResult<TeamWorkflowApprovalList>> {\n  return call(host, accessToken, TeamWorkflowApprovalListSchema, {\n    method: 'GET',\n    path: `${base(target)}/approvals`,\n    query: { source: target.source },\n  });\n}\n\nexport function decideWorkflowApproval(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { approvalId: string },\n  body: TeamWorkflowApprovalDecideRequest,\n): Promise<WorkflowsApiResult<TeamWorkflowApprovalDecided>> {\n  return call(host, accessToken, TeamWorkflowApprovalDecidedSchema, {\n    method: 'POST',\n    path: `${base(target)}/approvals/${segment(target.approvalId)}`,\n    query: { source: target.source },\n    body,\n  });\n}\n\nfunction base(target: TeamTarget): string {\n  return `/api/partner/teams/${segment(target.team)}/workflows`;\n}\n\nasync function call<T>(\n  host: string,\n  accessToken: string,\n  schema: z.ZodType<T>,\n  init: {\n    method: 'GET' | 'POST';\n    path: string;\n    query: Record<string, string>;\n    body?: unknown;\n  },\n): Promise<WorkflowsApiResult<T>> {\n  const response = await request(\n    `${host}${init.path}?${new URLSearchParams(init.query)}`,\n    {\n      method: init.method,\n      headers: {\n        accept: 'application/json',\n        authorization: `Bearer ${accessToken}`,\n        ...(init.body === undefined\n          ? {}\n          : { 'content-type': 'application/json' }),\n      },\n      body: init.body === undefined ? undefined : JSON.stringify(init.body),\n    },\n  );\n\n  if (\n    response.status === 401 ||\n    (response.status >= 300 && response.status < 400)\n  ) {\n    return { status: 'unauthorized' };\n  }\n\n  const body = await readOptionalJson(response);\n  const code = typeof body.code === 'string' ? body.code : null;\n  const message =\n    typeof body.error === 'string' && body.error ? body.error : null;\n\n  if (response.status === 403 && code === 'MFA_REQUIRED') {\n    throw authRequiredError(\n      message ?? `${host} requires multi-factor authentication.`,\n      'Complete MFA in the browser, then run \"ekanos login\" again.',\n    );\n  }\n  if (response.status === 403) {\n    throw forbiddenError(\n      message ?? 'Not permitted on this Source.',\n      code === 'SOURCE_ADMIN_REQUIRED'\n        ? \"Only a Source admin manages its teams' workflows.\"\n        : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 404) {\n    throw notFoundError(\n      message ?? 'Not found.',\n      code === 'TEAM_NOT_FOUND'\n        ? 'Run \"ekanos teams list\" to see the teams on this Source.'\n        : code === 'WORKFLOW_NOT_FOUND'\n          ? 'Run \"ekanos workflows list --team <slug>\" for the team\\'s workflows (a member\\'s personal workflow is theirs alone).'\n          : code === 'RUN_NOT_FOUND'\n            ? 'Run \"ekanos workflows runs list --team <slug>\" for the team\\'s runs.'\n            : code === 'APPROVAL_NOT_FOUND'\n              ? 'Run \"ekanos workflows approvals list --team <slug>\" for what is waiting.'\n              : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 409 && code === 'CODE_ACCESS_NEEDS_APPROVAL') {\n    const details = Array.isArray(body.codeAccess) ? body.codeAccess : [];\n    return {\n      status: 'needs-access',\n      error: message ?? 'Custom Code access needs your approval.',\n      codeAccess: details.filter(isCodeAccess),\n    };\n  }\n  if (response.status === 422) {\n    throw validationError(\n      message ?? 'The host refused the workflow definition.',\n      code === 'INVALID_DEFINITION'\n        ? 'Fix the definition and apply it again; nothing was saved.'\n        : 'The stored definition no longer validates: fix it with \"ekanos workflows apply <file> --update <id>\".',\n    );\n  }\n  if (response.status === 409 || response.status === 502) {\n    throw invalidStateError(\n      message ?? 'The host refused the request in its current state.',\n      code === 'WORKFLOWS_EXPERIENCE_OFF'\n        ? 'Ask Ekanos to turn on Workflows for this Source: only a super-admin can (\"ekanos sources products\" shows it as off).'\n        : code === 'AMBIGUOUS_WORKFLOW'\n          ? 'Name it by id: \"ekanos workflows list --team <slug>\" shows each one\\'s.'\n          : code === 'WORKFLOW_ARCHIVED'\n            ? 'Restore it in the app first, or apply without --update to create a new draft.'\n            : code === 'ALREADY_DECIDED' || code === 'APPROVAL_EXPIRED'\n              ? 'Run \"ekanos workflows approvals list --team <slug>\" for what is still waiting.'\n              : code === 'RUN_FINISHED'\n                ? 'Nothing to stop. \"ekanos workflows runs show <run-id> --team <slug>\" shows how it ended.'\n                : code === 'CANCEL_FAILED'\n                  ? 'Its status is reconciled automatically; check \"ekanos workflows runs show <run-id>\" shortly.'\n                  : code === 'RESUME_FAILED'\n                    ? 'The decision is saved; the run picks it up shortly. Check with \"ekanos workflows runs show <run-id>\".'\n                    : code === 'RUN_REFUSED'\n                      ? 'A live run needs an active workflow (\"ekanos workflows enable\"); \"--dry-run\" rehearses a draft.'\n                      : 'Run \"ekanos workflows show <id> --team <slug>\" for its status and what blocks it.',\n    );\n  }\n  if (response.status === 400) {\n    throw usageError(\n      message ?? 'The host refused the request.',\n      'See \"ekanos workflows --help\".',\n    );\n  }\n  if (!response.ok) {\n    throw networkError(\n      `${host}${init.path} responded ${response.status}.`,\n      response.status >= 500\n        ? 'The Ekanos deployment returned a server error. Retry shortly.'\n        : 'Confirm the host runs a build that includes the workflows routes.',\n    );\n  }\n\n  const parsed = schema.safeParse(body.data);\n  if (!parsed.success) {\n    throw networkError(\n      `${host}${init.path} answered in a shape this CLI does not read.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the workflows contract.',\n    );\n  }\n  return { status: 'ok', data: parsed.data };\n}\n\nfunction isCodeAccess(value: unknown): value is CodeAccess {\n  if (typeof value !== 'object' || value === null) return false;\n  const entry = value as Record<string, unknown>;\n  return (\n    typeof entry.stepId === 'string' &&\n    (entry.effect === 'read' || entry.effect === 'write') &&\n    Array.isArray(entry.egressHosts) &&\n    Array.isArray(entry.tools)\n  );\n}\n\nasync function readOptionalJson(\n  response: Response,\n): Promise<Record<string, unknown>> {\n  try {\n    const parsed: unknown = await response.json();\n    return typeof parsed === 'object' && parsed !== null\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n"]}
+{"version":3,"file":"workflows-api.js","sourceRoot":"","sources":["../src/workflows-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,yBAAyB,EAIzB,iCAAiC,EAEjC,8BAA8B,EAE9B,wBAAwB,EAExB,sBAAsB,EAEtB,8BAA8B,EAE9B,2BAA2B,EAE3B,yBAAyB,EAGzB,4BAA4B,EAE5B,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAuClB,MAAM,OAAO,GAAG,kBAAkB,CAAC;AAEnC,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAqC;IAErC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,KAAK,kBAAI,MAAM,EAAE,MAAM,CAAC,MAAM,IAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE;KACtE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,WAAmB,EACnB,MAAyC;IAEzC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE;QACvD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACnD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAkB,EAClB,IAA8B;IAE9B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACxD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAyC,EACzC,IAA+B;IAE/B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,+BAA+B,EAAE;QAC9D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS;QAC1D,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAAyC,EACzC,IAAiC;IAEjC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;QACxD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAA2D;IAE3D,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACxD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO;QAC5B,KAAK,gCACH,MAAM,EAAE,MAAM,CAAC,MAAM,IAClB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACtD,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpD;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,WAAmB,EACnB,MAAsC;IAEtC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;QAC1D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACrD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,EACnB,MAAsC;IAEtC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,8BAA8B,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS;QAC5D,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,WAAmB,EACnB,MAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,8BAA8B,EAAE;QAC7D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,WAAmB,EACnB,MAA2C,EAC3C,IAAuC;IAEvC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,iCAAiC,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;QAC/D,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,MAAkB;IAC9B,OAAO,sBAAsB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,IAAY,EACZ,WAAmB,EACnB,MAAoB,EACpB,IAKC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACxD;QACE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,kBACL,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,UAAU,WAAW,EAAE,IACnC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC5C;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CACF,CAAC;IAEF,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,IAAI,wCAAwC,EAC1D,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,CAClB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,uBAAuB;YAC9B,CAAC,CAAC,mDAAmD;YACrD,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,CACjB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,YAAY,EACvB,IAAI,KAAK,gBAAgB;YACvB,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,IAAI,KAAK,oBAAoB;gBAC7B,CAAC,CAAC,sHAAsH;gBACxH,CAAC,CAAC,IAAI,KAAK,eAAe;oBACxB,CAAC,CAAC,sEAAsE;oBACxE,CAAC,CAAC,IAAI,KAAK,oBAAoB;wBAC7B,CAAC,CAAC,0EAA0E;wBAC5E,CAAC,CAAC,8DAA8D,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,yCAAyC;YAC3D,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,eAAe,CACnB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,2CAA2C,EACtD,IAAI,KAAK,oBAAoB;YAC3B,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,uGAAuG,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,oDAAoD,EAC/D,IAAI,KAAK,0BAA0B;YACjC,CAAC,CAAC,+GAA+G;YACjH,CAAC,CAAC,IAAI,KAAK,oBAAoB;gBAC7B,CAAC,CAAC,yEAAyE;gBAC3E,CAAC,CAAC,IAAI,KAAK,mBAAmB;oBAC5B,CAAC,CAAC,+EAA+E;oBACjF,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,kBAAkB;wBACzD,CAAC,CAAC,gFAAgF;wBAClF,CAAC,CAAC,IAAI,KAAK,cAAc;4BACvB,CAAC,CAAC,0FAA0F;4BAC5F,CAAC,CAAC,IAAI,KAAK,eAAe;gCACxB,CAAC,CAAC,8FAA8F;gCAChG,CAAC,CAAC,IAAI,KAAK,eAAe;oCACxB,CAAC,CAAC,uGAAuG;oCACzG,CAAC,CAAC,IAAI,KAAK,aAAa;wCACtB,CAAC,CAAC,iGAAiG;wCACnG,CAAC,CAAC,mFAAmF,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,cAAc,QAAQ,CAAC,MAAM,GAAG,EACnD,QAAQ,CAAC,MAAM,IAAI,GAAG;YACpB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,mEAAmE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,8CAA8C,EACjE,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,OAAO,CACL,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC;QACrD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAChC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;eAAO,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import {\n  type TeamWorkflowApplied,\n  TeamWorkflowAppliedSchema,\n  type TeamWorkflowApplyRequest,\n  type TeamWorkflowApprovalDecideRequest,\n  type TeamWorkflowApprovalDecided,\n  TeamWorkflowApprovalDecidedSchema,\n  type TeamWorkflowApprovalList,\n  TeamWorkflowApprovalListSchema,\n  type TeamWorkflowDetail,\n  TeamWorkflowDetailSchema,\n  type TeamWorkflowList,\n  TeamWorkflowListSchema,\n  type TeamWorkflowRunCancelled,\n  TeamWorkflowRunCancelledSchema,\n  type TeamWorkflowRunDetail,\n  TeamWorkflowRunDetailSchema,\n  type TeamWorkflowRunList,\n  TeamWorkflowRunListSchema,\n  type TeamWorkflowRunStartRequest,\n  type TeamWorkflowRunStarted,\n  TeamWorkflowRunStartedSchema,\n  type TeamWorkflowStatusChanged,\n  TeamWorkflowStatusChangedSchema,\n  type TeamWorkflowStatusRequest,\n} from '@ekanos/integration-schema';\nimport type { z } from 'zod';\n\nimport { request } from './auth/ekanos-api';\nimport {\n  authRequiredError,\n  forbiddenError,\n  invalidStateError,\n  networkError,\n  notFoundError,\n  usageError,\n  validationError,\n} from './errors';\n\n/**\n * The CLI's client for a team's workflows — `ekanos workflows`.\n *\n *   GET  /api/partner/teams/<team>/workflows                       → TeamWorkflowList\n *   POST /api/partner/teams/<team>/workflows                       → TeamWorkflowApplied\n *   GET  /api/partner/teams/<team>/workflows/<id>                  → TeamWorkflowDetail\n *   POST /api/partner/teams/<team>/workflows/<id>/status           → TeamWorkflowStatusChanged\n *   POST /api/partner/teams/<team>/workflows/<id>/runs             → TeamWorkflowRunStarted\n *   GET  /api/partner/teams/<team>/workflows/runs                  → TeamWorkflowRunList\n *   GET  /api/partner/teams/<team>/workflows/runs/<id>             → TeamWorkflowRunDetail\n *   POST /api/partner/teams/<team>/workflows/runs/<id>/cancel      → TeamWorkflowRunCancelled\n *   GET  /api/partner/teams/<team>/workflows/approvals             → TeamWorkflowApprovalList\n *   POST /api/partner/teams/<team>/workflows/approvals/<id>        → TeamWorkflowApprovalDecided\n *\n * Every path carries `?source=<slug>`.\n */\n\nexport type WorkflowsApiResult<T> =\n  | { status: 'ok'; data: T }\n  | { status: 'unauthorized' }\n  /** Activation stopped only on what Custom Code reaches: ask, then resend. */\n  | { status: 'needs-access'; error: string; codeAccess: CodeAccess[] };\n\nexport interface CodeAccess {\n  stepId: string;\n  effect: 'read' | 'write';\n  egressHosts: string[];\n  tools: string[];\n  dependencies: string[];\n  reviewSummary: string | null;\n}\n\ninterface TeamTarget {\n  source: string;\n  team: string;\n}\n\nconst segment = encodeURIComponent;\n\nexport function listWorkflows(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { all: boolean },\n): Promise<WorkflowsApiResult<TeamWorkflowList>> {\n  return call(host, accessToken, TeamWorkflowListSchema, {\n    method: 'GET',\n    path: base(target),\n    query: { source: target.source, ...(target.all ? { all: '1' } : {}) },\n  });\n}\n\nexport function showWorkflow(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { workflow: string },\n): Promise<WorkflowsApiResult<TeamWorkflowDetail>> {\n  return call(host, accessToken, TeamWorkflowDetailSchema, {\n    method: 'GET',\n    path: `${base(target)}/${segment(target.workflow)}`,\n    query: { source: target.source },\n  });\n}\n\nexport function applyWorkflow(\n  host: string,\n  accessToken: string,\n  target: TeamTarget,\n  body: TeamWorkflowApplyRequest,\n): Promise<WorkflowsApiResult<TeamWorkflowApplied>> {\n  return call(host, accessToken, TeamWorkflowAppliedSchema, {\n    method: 'POST',\n    path: base(target),\n    query: { source: target.source },\n    body,\n  });\n}\n\nexport function setWorkflowStatus(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { workflow: string },\n  body: TeamWorkflowStatusRequest,\n): Promise<WorkflowsApiResult<TeamWorkflowStatusChanged>> {\n  return call(host, accessToken, TeamWorkflowStatusChangedSchema, {\n    method: 'POST',\n    path: `${base(target)}/${segment(target.workflow)}/status`,\n    query: { source: target.source },\n    body,\n  });\n}\n\nexport function startWorkflowRun(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { workflow: string },\n  body: TeamWorkflowRunStartRequest,\n): Promise<WorkflowsApiResult<TeamWorkflowRunStarted>> {\n  return call(host, accessToken, TeamWorkflowRunStartedSchema, {\n    method: 'POST',\n    path: `${base(target)}/${segment(target.workflow)}/runs`,\n    query: { source: target.source },\n    body,\n  });\n}\n\nexport function listWorkflowRuns(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { workflow?: string; status?: string },\n): Promise<WorkflowsApiResult<TeamWorkflowRunList>> {\n  return call(host, accessToken, TeamWorkflowRunListSchema, {\n    method: 'GET',\n    path: `${base(target)}/runs`,\n    query: {\n      source: target.source,\n      ...(target.workflow ? { workflow: target.workflow } : {}),\n      ...(target.status ? { status: target.status } : {}),\n    },\n  });\n}\n\nexport function showWorkflowRun(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { runId: string },\n): Promise<WorkflowsApiResult<TeamWorkflowRunDetail>> {\n  return call(host, accessToken, TeamWorkflowRunDetailSchema, {\n    method: 'GET',\n    path: `${base(target)}/runs/${segment(target.runId)}`,\n    query: { source: target.source },\n  });\n}\n\nexport function cancelWorkflowRun(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { runId: string },\n): Promise<WorkflowsApiResult<TeamWorkflowRunCancelled>> {\n  return call(host, accessToken, TeamWorkflowRunCancelledSchema, {\n    method: 'POST',\n    path: `${base(target)}/runs/${segment(target.runId)}/cancel`,\n    query: { source: target.source },\n  });\n}\n\nexport function listWorkflowApprovals(\n  host: string,\n  accessToken: string,\n  target: TeamTarget,\n): Promise<WorkflowsApiResult<TeamWorkflowApprovalList>> {\n  return call(host, accessToken, TeamWorkflowApprovalListSchema, {\n    method: 'GET',\n    path: `${base(target)}/approvals`,\n    query: { source: target.source },\n  });\n}\n\nexport function decideWorkflowApproval(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { approvalId: string },\n  body: TeamWorkflowApprovalDecideRequest,\n): Promise<WorkflowsApiResult<TeamWorkflowApprovalDecided>> {\n  return call(host, accessToken, TeamWorkflowApprovalDecidedSchema, {\n    method: 'POST',\n    path: `${base(target)}/approvals/${segment(target.approvalId)}`,\n    query: { source: target.source },\n    body,\n  });\n}\n\nfunction base(target: TeamTarget): string {\n  return `/api/partner/teams/${segment(target.team)}/workflows`;\n}\n\nasync function call<T>(\n  host: string,\n  accessToken: string,\n  schema: z.ZodType<T>,\n  init: {\n    method: 'GET' | 'POST';\n    path: string;\n    query: Record<string, string>;\n    body?: unknown;\n  },\n): Promise<WorkflowsApiResult<T>> {\n  const response = await request(\n    `${host}${init.path}?${new URLSearchParams(init.query)}`,\n    {\n      method: init.method,\n      headers: {\n        accept: 'application/json',\n        authorization: `Bearer ${accessToken}`,\n        ...(init.body === undefined\n          ? {}\n          : { 'content-type': 'application/json' }),\n      },\n      body: init.body === undefined ? undefined : JSON.stringify(init.body),\n    },\n  );\n\n  if (\n    response.status === 401 ||\n    (response.status >= 300 && response.status < 400)\n  ) {\n    return { status: 'unauthorized' };\n  }\n\n  const body = await readOptionalJson(response);\n  const code = typeof body.code === 'string' ? body.code : null;\n  const message =\n    typeof body.error === 'string' && body.error ? body.error : null;\n\n  if (response.status === 403 && code === 'MFA_REQUIRED') {\n    throw authRequiredError(\n      message ?? `${host} requires multi-factor authentication.`,\n      'Complete MFA in the browser, then run \"ekanos login\" again.',\n    );\n  }\n  if (response.status === 403) {\n    throw forbiddenError(\n      message ?? 'Not permitted on this Source.',\n      code === 'SOURCE_ADMIN_REQUIRED'\n        ? \"Only a Source admin manages its teams' workflows.\"\n        : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 404) {\n    throw notFoundError(\n      message ?? 'Not found.',\n      code === 'TEAM_NOT_FOUND'\n        ? 'Run \"ekanos teams list\" to see the teams on this Source.'\n        : code === 'WORKFLOW_NOT_FOUND'\n          ? 'Run \"ekanos workflows list --team <slug>\" for the team\\'s workflows (a member\\'s personal workflow is theirs alone).'\n          : code === 'RUN_NOT_FOUND'\n            ? 'Run \"ekanos workflows runs list --team <slug>\" for the team\\'s runs.'\n            : code === 'APPROVAL_NOT_FOUND'\n              ? 'Run \"ekanos workflows approvals list --team <slug>\" for what is waiting.'\n              : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 409 && code === 'CODE_ACCESS_NEEDS_APPROVAL') {\n    const details = Array.isArray(body.codeAccess) ? body.codeAccess : [];\n    return {\n      status: 'needs-access',\n      error: message ?? 'Custom Code access needs your approval.',\n      codeAccess: details.filter(isCodeAccess),\n    };\n  }\n  if (response.status === 422) {\n    throw validationError(\n      message ?? 'The host refused the workflow definition.',\n      code === 'INVALID_DEFINITION'\n        ? 'Fix the definition and apply it again; nothing was saved.'\n        : 'The stored definition no longer validates: fix it with \"ekanos workflows apply <file> --update <id>\".',\n    );\n  }\n  if (response.status === 409 || response.status === 502) {\n    throw invalidStateError(\n      message ?? 'The host refused the request in its current state.',\n      code === 'WORKFLOWS_EXPERIENCE_OFF'\n        ? 'Ask Ekanos to turn on Workflows for this Source: only Ekanos can (\"ekanos sources products\" shows it as off).'\n        : code === 'AMBIGUOUS_WORKFLOW'\n          ? 'Name it by id: \"ekanos workflows list --team <slug>\" shows each one\\'s.'\n          : code === 'WORKFLOW_ARCHIVED'\n            ? 'Restore it in the app first, or apply without --update to create a new draft.'\n            : code === 'ALREADY_DECIDED' || code === 'APPROVAL_EXPIRED'\n              ? 'Run \"ekanos workflows approvals list --team <slug>\" for what is still waiting.'\n              : code === 'RUN_FINISHED'\n                ? 'Nothing to stop. \"ekanos workflows runs show <run-id> --team <slug>\" shows how it ended.'\n                : code === 'CANCEL_FAILED'\n                  ? 'Its status is reconciled automatically; check \"ekanos workflows runs show <run-id>\" shortly.'\n                  : code === 'RESUME_FAILED'\n                    ? 'The decision is saved; the run picks it up shortly. Check with \"ekanos workflows runs show <run-id>\".'\n                    : code === 'RUN_REFUSED'\n                      ? 'A live run needs an active workflow (\"ekanos workflows enable\"); \"--dry-run\" rehearses a draft.'\n                      : 'Run \"ekanos workflows show <id> --team <slug>\" for its status and what blocks it.',\n    );\n  }\n  if (response.status === 400) {\n    throw usageError(\n      message ?? 'The host refused the request.',\n      'See \"ekanos workflows --help\".',\n    );\n  }\n  if (!response.ok) {\n    throw networkError(\n      `${host}${init.path} responded ${response.status}.`,\n      response.status >= 500\n        ? 'The Ekanos deployment returned a server error. Retry shortly.'\n        : 'Confirm the host runs a build that includes the workflows routes.',\n    );\n  }\n\n  const parsed = schema.safeParse(body.data);\n  if (!parsed.success) {\n    throw networkError(\n      `${host}${init.path} answered in a shape this CLI does not read.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the workflows contract.',\n    );\n  }\n  return { status: 'ok', data: parsed.data };\n}\n\nfunction isCodeAccess(value: unknown): value is CodeAccess {\n  if (typeof value !== 'object' || value === null) return false;\n  const entry = value as Record<string, unknown>;\n  return (\n    typeof entry.stepId === 'string' &&\n    (entry.effect === 'read' || entry.effect === 'write') &&\n    Array.isArray(entry.egressHosts) &&\n    Array.isArray(entry.tools)\n  );\n}\n\nasync function readOptionalJson(\n  response: Response,\n): Promise<Record<string, unknown>> {\n  try {\n    const parsed: unknown = await response.json();\n    return typeof parsed === 'object' && parsed !== null\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ekanos/cli",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "private": false,
   "description": "The Ekanos partner toolchain CLI: scaffold, validate, and test an Ekanos integration against the published @ekanos packages. Agent-native — every verb speaks JSON with a stable exit-code taxonomy.",
   "keywords": [
@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "@clack/prompts": "1.8.1",
-    "@ekanos/integration-schema": "0.23.0",
+    "@ekanos/integration-schema": "0.24.0",
     "esbuild": "0.28.2",
     "picocolors": "1.1.1"
   },

package/templates/AGENTS.md.tmpl

@@ -176,14 +176,30 @@ snapshot (trim the oldest rows until `JSON.stringify` fits, and say so with a
 
 ### Secrets and the activation contract
 
-There is **no `secrets` block** in the definition. Secrets are *named*, not
-declared, and the activation form is where most names come from:
-
-**Every string-valued field of the `activationData` a user submits becomes
-readable as `ctx.secrets.get('<that exact field name>')`.** No prefixing, no
-transformation. Renaming a form field renames the secret and breaks every
-handler reading it, so keep each name in one exported constant
-(`src/config.ts`) imported by both the form and the handlers.
+There is **no `secrets` block** in the definition. Secrets are *named*, and the
+activation form is where most names come from. Declare the form's fields in
+`activation.fields` and mark every credential `secret: true`:
+
+```ts
+activation: {
+  fields: [
+    { name: ACME_API_KEY, label: 'API key', secret: true },
+    { name: ACME_MERCHANT_ID, label: 'Merchant ID', secret: false },
+  ],
+},
+```
+
+**A `secret: true` field is stored in the platform vault, never in the
+connection record every team member can read, and is readable as
+`ctx.secrets.get('<that exact field name>')`.** No prefixing, no
+transformation. A field whose name reads like a credential (`apiKey`,
+`client_secret`, `password`, `token`) must say `secret: true` or
+`secret: false`; `defineIntegration()` and `ekanos validate` reject it
+otherwise. Only declared fields are stored. Renaming a form field renames the
+secret and breaks every handler reading it, so keep each name in one exported
+constant (`src/config.ts`) imported by the form, the declaration and the
+handlers. Never put a credential in `onSuccess({ configData })`: that is stored
+in the clear.
 
 Secret values go to the platform vault — **never** write a credential into
 `ctx.storage`, `configData`, logs, or a tool result. `ctx.secrets.set()` is

package/templates/experience/AGENTS.md.tmpl

@@ -10,7 +10,9 @@ integration itself.
   `ekanos add <integration>@<version> --from-dir <dir>`.
   Never edit `src/.ekanos/integrations.d.ts`; `ekanos codegen` writes it.
 - Read: `useOperation(integration, 'tool/<name>', input)`. Write:
-  `useOperationMutation(integration, 'action/<name>')` (a person approves each write).
+  `useOperationMutation(integration, 'action/<name>')` or a write `'tool/<name>'`
+  (runs on the person's click; require `confirmed: z.literal(true)` in the
+  operation's input to ask for a second click).
   Server: `operation(integration, op, input)` from `@ekanos/sdk/experience/server`.
 - Never import integration code (`@companydotcom/integration-*`, a path into an
   integration repo, `@kit/*`). `ekanos check` and `ekanos build` fail on it.

package/templates/experience/package.json.tmpl

@@ -21,16 +21,16 @@
     "build": "npx ekanos build"
   },
   "dependencies": {
-    "@ekanos/sdk": "^0.23.0",
-    "@ekanos/ui": "^0.23.0",
+    "@ekanos/sdk": "^0.24.0",
+    "@ekanos/ui": "^0.24.0",
     "@tanstack/react-query": "^5.101.4",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
     "zod": "^3.25.76"
   },
   "devDependencies": {
-    "@ekanos/cli": "^0.21.0",
-    "@ekanos/harness": "^0.23.0",
+    "@ekanos/cli": "^0.22.0",
+    "@ekanos/harness": "^0.24.0",
     "@tailwindcss/postcss": "^4.3.3",
     "@typescript-eslint/parser": "^8.46.2",
     "@types/react": "^19.2.0",

package/templates/experience/src/widgets/hello-widget.tsx.tmpl

@@ -15,7 +15,9 @@ import {
 //   import { useOperation } from '@ekanos/sdk/experience/client';
 //   const posts = useOperation('sanity', 'tool/list_posts', { limit: 10 });
 //
-// and write with useOperationMutation, which asks a person to approve first.
+// and write with useOperationMutation: the write runs on the person's click.
+// To ask for a second click, require `confirmed: z.literal(true)` in the
+// operation's input.
 export function HelloWidget() {
   return (
     <Widget.DataState>

package/templates/package.json.tmpl

@@ -12,12 +12,12 @@
     "prepare": "node scripts/setup-hooks.mjs"
   },
   "dependencies": {
-    "@ekanos/sdk": "^0.23.0",
-    "@ekanos/ui": "^0.23.0"
+    "@ekanos/sdk": "^0.24.0",
+    "@ekanos/ui": "^0.24.0"
   },
   "devDependencies": {
-    "@ekanos/cli": "^0.21.0",
-    "@ekanos/harness": "^0.23.0",
+    "@ekanos/cli": "^0.22.0",
+    "@ekanos/harness": "^0.24.0",
     "@hookform/resolvers": "^5.2.2",
     "@tailwindcss/postcss": "^4.3.3",
     "@tanstack/react-query": "^5.101.4",

package/templates/skills/build-integration/SKILL.md

@@ -69,7 +69,8 @@ otherwise ask in plain prose with lettered options.
    an action (a widget's own deterministic write — a form's Save button).
 4. **Auth** (choice): API key / Bearer / OAuth 2.0 / Basic / not sure
    (research will settle it). This decides the activation-form fields — and
-   every string field name on that form IS a secret name (see AGENTS.md).
+   every credential field on that form is declared `secret: true` in
+   `activation.fields` and its field name IS the secret name (see AGENTS.md).
    For OAuth 2.0, also ask whether they have a developer/sandbox app already;
    during research, find the console page where one is created — you will
    put it in `harness.config.ts` (see `references/oauth-setup.md`).

package/templates/skills/build-integration/references/api-wiring.md

@@ -13,8 +13,10 @@ code. This file is the order of work and the traps.
    ids, egress origins. Both the form and every handler import from here;
    a renamed form field silently orphans its secret otherwise.
 2. **Activation form** — zod schema + react-hook-form inside
-   `ActivationForm` (see AGENTS.md). Every string field the user submits
-   becomes `ctx.secrets.get('<field name>')`. Validate the credential shape
+   `ActivationForm` (see AGENTS.md), and declare every field it submits in
+   `activation.fields` with credentials marked `secret: true` (a credential
+   left undeclared is rejected). A secret field is stored in the vault and read
+   back as `ctx.secrets.get('<field name>')`. Validate the credential shape
    in the schema (prefix, length) so a paste error fails at the form, not in
    a handler.
 3. **A thin API client** — one module owning base URL, auth header assembly,